Comparison Overview

Fidelity National Financial

VS

State Street

Fidelity National Financial

601 Riverside Avenue, Building 5, Jacksonville, FL, US, 32204
Last Update: 2025-12-09
Between 700 and 749

Fidelity National Financial, Inc. (NYSE: FNF) is a leading provider of title insurance and transaction services to the real estate and mortgage industries. Ranked #359 on the FORTUNE 500(r) list for 2023, FNF is the nation's largest title insurance company through our title insurance underwriters (Fidelity National Title, Chicago Title, Commonwealth Land Title, Alamo Title and National Title Insurance of New York) that collectively issue more title insurance policies than any other title company in the United States. Our mission is to advance, expand, and protect the experience of property ownership by making the safety of our customers our primary focus. We pride ourselves on being extremely customer-oriented, motivated, and quick to provide solutions for all of your title insurance needs. We strongly encourage employee ownership of company stock so our FNF family can share in our company’s continuous growth and be a valuable part of something bigger than themselves.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 19,380
Subsidiaries: 0
12-month incidents
0
Known data breaches
3
Attack type number
1

State Street

One Lincoln St, Boston, 02111, US
Last Update: 2025-12-09
Between 800 and 849

At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 45,512
Subsidiaries: 4
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/fidelity-national-financial.jpeg
Fidelity National Financial
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/state-street.jpeg
State Street
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Fidelity National Financial
100%
Compliance Rate
0/4 Standards Verified
State Street
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Fidelity National Financial in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for State Street in 2025.

Incident History — Fidelity National Financial (X = Date, Y = Severity)

Fidelity National Financial cyber incidents detection timeline including parent company and subsidiaries

Incident History — State Street (X = Date, Y = Severity)

State Street cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/fidelity-national-financial.jpeg
Fidelity National Financial
Incidents

Date Detected: 12/2023
Type:Breach
Blog: Blog

Date Detected: 4/2014
Type:Breach
Attack Vector: Phishing
Blog: Blog

Date Detected: 7/2013
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/state-street.jpeg
State Street
Incidents

No Incident

FAQ

State Street company demonstrates a stronger AI Cybersecurity Score compared to Fidelity National Financial company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Fidelity National Financial company has historically faced a number of disclosed cyber incidents, whereas State Street company has not reported any.

In the current year, State Street company and Fidelity National Financial company have not reported any cyber incidents.

Neither State Street company nor Fidelity National Financial company has reported experiencing a ransomware attack publicly.

Fidelity National Financial company has disclosed at least one data breach, while the other State Street company has not reported such incidents publicly.

Neither State Street company nor Fidelity National Financial company has reported experiencing targeted cyberattacks publicly.

Neither Fidelity National Financial company nor State Street company has reported experiencing or disclosing vulnerabilities publicly.

Neither Fidelity National Financial nor State Street holds any compliance certifications.

Neither company holds any compliance certifications.

State Street company has more subsidiaries worldwide compared to Fidelity National Financial company.

State Street company employs more people globally than Fidelity National Financial company, reflecting its scale as a Financial Services.

Neither Fidelity National Financial nor State Street holds SOC 2 Type 1 certification.

Neither Fidelity National Financial nor State Street holds SOC 2 Type 2 certification.

Neither Fidelity National Financial nor State Street holds ISO 27001 certification.

Neither Fidelity National Financial nor State Street holds PCI DSS certification.

Neither Fidelity National Financial nor State Street holds HIPAA certification.

Neither Fidelity National Financial nor State Street holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N