What is the official website of FEMSA ?

The official website of FEMSA is http://www.femsa.com.

What is FEMSA's cybersecurity risk score?

FEMSA has an AI-generated cybersecurity risk score of 818 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has FEMSA experienced?

According to Rankiteo, FEMSA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has FEMSA been affected by any supply chain cyber incidents ?

According to Rankiteo, FEMSA has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does FEMSA have SOC 2 Type 1 certification ?

According to Rankiteo, FEMSA is not certified under SOC 2 Type 1.

Does FEMSA have SOC 2 Type 2 certification ?

According to Rankiteo, FEMSA does not hold a SOC 2 Type 2 certification.

Does FEMSA comply with GDPR ?

According to Rankiteo, FEMSA is not listed as GDPR compliant.

Does FEMSA have PCI DSS certification ?

According to Rankiteo, FEMSA does not currently maintain PCI DSS compliance.

Does FEMSA comply with HIPAA ?

According to Rankiteo, FEMSA is not compliant with HIPAA regulations.

Does FEMSA have ISO 27001 certification ?

According to Rankiteo,FEMSA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does FEMSA operate in ?

FEMSA operates primarily in the Manufacturing industry.

How many employees does FEMSA have ?

FEMSA employs approximately 12,352 people worldwide.

Does FEMSA own any subsidiaries ?

FEMSA presently has no subsidiaries across any sectors.

How many LinkedIn followers does FEMSA have ?

FEMSA's official LinkedIn profile has approximately 1,718,500 followers.

What is the NAICS classification code for FEMSA ?

FEMSA is classified under the NAICS code 30, which corresponds to Manufacturing.

Does FEMSA have a Crunchbase profile ?

Yes, FEMSA has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/femsa.

Does FEMSA have a LinkedIn profile ?

Yes, FEMSA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/femsa.

How many cybersecurity incidents has FEMSA experienced ?

As of August 8, 2026, Rankiteo reports that FEMSA has not experienced any cybersecurity incidents.

How many peer or competitor companies does FEMSA have ?

FEMSA has an estimated 8,197 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FEMSA

Boost Score +25 with badge (5 left)

818

/1000

Good

843

/1000

Good

FEMSA Vendor Cyber Rating & Cyber Score

femsa.com

cb in

Add Your Compliance Badge

FEMSA is a company that creates economic and social value through companies and institutions and strives to be the best employer and neighbor to the communities in which it operates. It participates in the retail industry through Proximity Americas Division operating OXXO, a small-format store chain, and other related retail formats, and Proximity Europe which includes Valora, our European retail unit which operates convenience and foodvenience formats. In the retail industry it also participates though a Health Division, which includes drugstores and related activities and Spin, which includes Spin by OXXO and Spin Premia, among other digital financial services initiatives. In the beverage industry, it participates through Coca-Cola

FEMSA A.I CyberSecurity Scoring

Scoring History

FEMSA

FEMSA CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

FEMSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FEMSA

Incidents vs Manufacturing Industry Avg (This Year)

No incidents recorded for FEMSA in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for FEMSA in 2026.

Incident Types FEMSA vs Manufacturing Industry Avg (This Year)

No incidents recorded for FEMSA in 2026.

Incident History - FEMSA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

FEMSA Subsidiaries

Parent Company

FEMSA

Manufacturing

Website: http://www.femsa.com

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

FEMSA Similar Companies

Prysmian

prysmian.com

Prysmian is a global cabling solutions provider leading the energy transition and digital transformation. By leveraging its wide geographical footprint and extensive product range, its track record of technological leadership and innovation, and a strong customer base, the company is well-placed to capitalise on its leading positions and win in new, growing markets. Prysmian’s business strategy perfectly matches key market drivers by developing resilient, high-performing, sustainable and innovative cable solutions in the segments of Transmission, Power Grid, Electrification and Digital Solutions. Prysmian is a public company listed on the Italian Stock Exchange, with almost 150 years of experience, over 33,000 employees, 109 plants and 27 R&D centres in over 50 countries, and sales of over €17 billion in 2024.

Steel Authority of India Limited

cb sail.co.in

Steel Authority of India Limited (SAIL) traces its origin to the formative years of an emerging nation - India. After independence, the steel sector was to propel the economic growth and rapid industrialization of the country, and since 1973, SAIL steel has played a pivotal role in transforming the nation. SAIL is the largest steel-making company in India and one of the seven Maharatna’s of the country’s Central Public Sector Enterprises. We produce top quality steel and iron at five integrated plants and three special steel plants, located principally in the eastern and central regions of India and situated close to domestic sources of raw materials. We manufacture and sell a broad range of steel products which are high in demand in the domestic as well as international market. Visit this page regularly to stay connected and get updates about our products, new initiatives, accomplishments, and more.. Follow us at X: www.x.com/SAILSteel and www.instgram.com/steelauthority

Unilever

unilever.com

Every day, 3.4 billion people around the world enjoy our products - from ground-breaking brands like Hellmann's, Domestos, Dove and Rexona (to name just a few). Our brands lead the way - innovating in their fields, delighting their consumers and powering our business forward. And it is our people who make everything happen. Our bright and curious people who imagine and create the future - diverse, passionate and ambitious people. A role with us means endless opportunities with global brands that make markets and people who play to win. We make markets and create cultures through some of the biggest brands and best-known products in the world. Talented teams in 190 countries redefine the way we do business and set new standards for our brands. Always learning, always innovating. Is this your moment?

RPG Group

rpggroup.com

RPG Group, established in 1979 and headquartered in Mumbai, is one of India's fastest growing diversified business group with a turnover in excess of US$5.2 billion. The Group has a presence in the core sectors of the economy - Infrastructure (KEC International), Mobility (CEAT), Information Technology (Zensar), Pharmaceuticals (RPG Life Sciences), Energy (Raychem) and Plantations (HML). It has incubated future forward businesses like Asvata (carbon credit), TyresNMore (doorstep tyre and battery fitment service) and Taabi (AI-Powered SaaS Platforms) The Group, through its venture capital fund RPG Ventures, invests in cutting-edge startups and has invested in SecureThings - automotive cybersecurity solutions, Sentra.World - Carbon Accounting Software, Nutrabay - sports nutrition retailer and more. The Group's Vision is Unleash Talent, Touch Lives, Outperform and Be Happy. The brand essence and tagline is captured in the phrase 'Hello Happiness'. It is the culmination of the Group's Vision tenets. It embodies the essence of the RPG spirit and evokes much of what the Group believes and stands for.

Philip Morris International

pmi.com

Philip Morris International (PMI) is a leading international consumer goods company working to deliver a smoke-free future and evolving its portfolio for the long term to include products outside of the tobacco and nicotine sector. Since 2008, PMI has invested more than USD 15 billion to develop, scientifically substantiate and commercialize innovative smoke-free products for adults who would otherwise continue to smoke, with the goal of completely ending the sale of cigarettes. In November 2022, PMI acquired Swedish Match – a leader in oral nicotine delivery – creating a global smoke-free champion led by the companies’ IQOS and ZYN brands. As of Q2 2025, PMI's smoke-free products were available for sale in 97 markets and smoke-free products accounted for approximately 41% of net revenues. With a strong foundation and significant expertise in life sciences, PMI announced in February 2021 its ambition to expand into wellness and healthcare areas and aims to enhance life through the delivery of seamless health experiences. For more information, please visit www.pmi.com and www.pmiscience.com. Our priority is to attract, support and keep with us diverse and unique individuals. Our global workforce of more than 69,000 people is one of our greatest strengths and the key to our success as a company. Our employees speak more than 80 languages and come from all corners of the world. PMI has also been certified as a “Global Top Employer” for the seventh consecutive year, in recognition of the high standards of excellence in our working environment and the exceptional development opportunities we offer. If you come into our offices or meet our people, you will quickly realize that at PMI everyone has the opportunity to make a difference and build phenomenal careers.

Amway

AmwayGlobal.com

Amway is a business owner-led health and wellbeing company based in Ada, Michigan, USA. It is committed to helping people live better, healthier lives across more than 100 markets and territories worldwide. Top-selling brands for Amway are Nutrilite™, Artistry™, and XS™ —all sold exclusively by entrepreneurs who are known as Amway Business Owners. Amway is the No.1 direct selling company in the world, according to the Direct Selling News Global 100, based on 2024 revenue. For company news, visit www.amwayglobal.com/newsroom/

JSW

jsw.in

At JSW, we believe innovation has the power to make the world #BetterEveryday. As a US$ 23 billion group, ranked among India’s leading business houses, we drive economic growth across sectors like Steel, Energy, Infrastructure, Cement, Paints, Green Mobility, Defence, Sports, and more. Our commitment to sustainable development includes becoming carbon neutral by 2050, building stronger infrastructure, and producing eco-friendly materials. Through our diverse workforce of 40,000 employees across India, the USA, Europe, and Africa, and initiatives led by the JSW Foundation, we are focused on improving lives, empowering communities, and bringing positive transformation to every life we touch. We combine excellence in execution, cutting-edge technologies, and a passion for sustainable growth to make a lasting difference and help make lives #BetterEveryday.

PT Indofood Sukses Makmur Tbk

indofood.com

Over a number of decades PT Indofood Sukses Makmur Tbk has been progressively transformed to become a Total Food Solutions company with operations in all stages of food manufacturing from the production of raw materials and their processing through to consumer products in the market. Today, it is renowned as a well–established company & a leading player in each category of business in which it operates. In its business operations, Indofood capitalizes on its resilient business model with 4 complementary Strategic Business Groups : Consumer Branded Products (CBP). Indofood CBP is one of the leading packaged food producers in Indonesia, with a wide range of packaged food products. ICBP product brands are among the strongest brands with the most significant mind share in Indonesia for consumer food brands. Bogasari, primarily a producer of wheat flour as well as pasta. Its business operations are supported by shipping and packaging units. Agribusiness. The Group’s principal business activities range from research and development, seed breeding, oil palm cultivation and milling; as well as the production & marketing of branded cooking oils, margarine and shortening. In addition, the Group is also involved in the cultivation and processing of rubber and sugar cane as well as other crops. Distribution, which boasts the most extensive distribution network in Indonesia, distributes the majority of Indofood’s and its subsidiaries’ consumer products as well as third–party products. Cultivation and Processed Vegetables activities are conducted by China Minzhong Food Corporation Limited (“CMFC”) which is listed on the SGX and is an integrated vegetable processing company in the People’s Republic of China. Through its decades of experience CMFC has developed an integrated demand-driven operation with wide-ranging cultivation and processing capabilities. In addition, CMFC also has a branded products operation.

Essity

essity.com

Essity - a globally leading hygiene and health company. Our expertise in hygiene and health began with the acquisition of the Swedish company Mölnlycke in 1975, through which our roots stretch back to 1849. Today, our sustainable innovations from globally trusted brands, designed for everybody and every body, care for the well-being of 1 billion people in 150 countries every day. Working at Essity is not just a career but a chance to make the world healthier, safer, and more hygienic. Our barrier breakers innovate for good and contribute to shaping a sustainable future. At Essity, every career is as unique as the individual. We empower employees to excel together and reach their full potential in a winning culture motivated by a powerful purpose. We provide a sustainable work-life based on flexibility for both employees and employers. At Essity, we are committed to Diversity, Equity, and Inclusion in everything we do. It is the key to our success in creating an inclusive, collaborative, and caring company culture where you can be you with us. Our purpose of Breaking Barriers to Well-being, is to enable customers and consumers to lead fuller lives at all stages of life. Our leading global brands TENA and Tork, and other strong brands such as Actimove, Cutimed, JOBST, Knix, Leukoplast, Libero, Libresse, Lotus, Modibodi, Nosotras, Saba, Tempo, TOM Organic and Zewa. In 2024, Essity had net sales of approximately SEK 146bn (EUR 13bn) and employed 36,000 people. The company’s headquarters is located in Stockholm, Sweden and Essity is listed on Nasdaq Stockholm.If you want to join a company where dedication to people is powered by innovation, welcome to Essity!

Loading…

NEWS

FEMSA CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 11, 2023 07:00 AM

Hackers Claim Coca-Cola Bottler Paid $1.5 Million to Keep Lid on ‘Certain’ Files Stolen in Ransomware Attack

Coca-Cola FEMSA, the world's largest franchise Coca-Cola bottler, allegedly suffered a cyberattack, prompting management to pay the hackers...

Read Article

December 06, 2021 08:00 AM

Tec de Monterrey inaugurates Cybersecurity Hub facilities

It is part of the School of Engineering and Sciences, it is located on 278 square meters and has ultimate equipment.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-52880

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serves requests through Go's default HTTP server with no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a result, incoming connections that never complete their request headers are held open indefinitely. When a REST listener is reachable beyond localhost through the documented all-interface bind or a Docker port-publish deployment, a single unauthenticated client can open many slow-header connections and hold them open until server file descriptors are exhausted, preventing the API from accepting new connections. This renders the REST API unavailable to legitimate clients. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52879

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttler, or bound on the number of concurrent in-flight spawns. Because the antiflood check runs inside the spawned goroutine rather than before it, a single connected peer can open a direct-send stream and send a stream of well-formed messages to force unbounded goroutine creation, where each goroutine allocates its own stack and holds a message reference until processing completes, adding scheduler and garbage-collection pressure faster than the runtime can drain it. This lets one peer degrade the node's availability and its ability to process legitimate traffic, resulting in a remotely triggerable denial of service. The issue is fixed in 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52878

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped on the Klever-Go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback, where txVersionChecker.CheckTxVersion dereferences tx.RawData.Version with no nil check. Because the libp2p pubsub callback, the underlying go-libp2p-pubsub validation worker, and Klever's own network/p2p layer install no recover(), the panic propagates and crashes the entire node process. The attacker payload is a 3-byte protobuf message; no validator key, stake, funds, or on-chain account is required, and delivery aimed at enough of the BLS validator set can halt block production, resulting in a chain halt. This issue has been fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-49343

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie() (in both userAccountsSyncer.go and kappAccountsSyncer.go), StartProcessing() reserves a slot from the NumGoRoutinesThrottler, but the corresponding EndProcessing() is only called on the success path and on the duplicate-root early return. As a result, any error from trie.NewTrie(), trie.NewTrieSyncer(), or trieSyncer.StartSyncing() (including the network-dependent timeout path) permanently consumes one slot for the lifetime of the throttler. An attacker who can repeatedly cause trie-node sync failures or timeouts during bootstrap can exhaust the bounded throttler, after which further account-data trie syncs stop making progress and SyncAccounts() returns a timeout. Because epoch bootstrap in syncUserAccountsState() and syncKappAccountsState() aborts on any such error, this causes bootstrap to fail, a core availability issue affecting fresh, restarting, or resyncing nodes and validators. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-48122

SUMMARY

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler `Gemfile` used at startup. A malicious repository containing a `.vscode/settings.json` could set these values to attacker-controlled targets. Opening and trusting the repository would then execute code with the privileges of the developer. The Ruby LSP gem and clients of the language server in other editors are not affected. Version 0.10.4 of the Ruby LSP VS Code extension fixes the issue.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: )

cvss4

Base Score: 5.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Shopify/ruby-lsp/security/advisories/GHSA-2x7g-8mp4-572w

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…