Comparison Overview
Foodbuy USA

Foodbuy USA
2400 Yorkmont Road, Charlotte, NC, 28217, US
Last Update: 09/03/2026
Foodbuy, LLC is the foodservice industry’s leading procurement services organization focused on lowering purchasing and product costs for both our parent company, Compass Group, as well as for our clients and members. Foodbuy negotiates and contracts for more than $35...

Krispy Kreme
2116 Hawkins St, Charlotte, North Carolina, US, 28203
Last Update: 27/05/2026
Headquartered in Charlotte, N.C., Krispy Kreme is one of the most beloved and well-known sweet treat brands in the world. Our iconic Original Glazed® doughnut is universally recognized for its hot-off-the-line, melt-in-your-mouth experience. Krispy Kreme operates in mor...
Compliance Ranges Comparison

Foodbuy USA







Krispy Kreme






Benchmark & Cyber Underwriting Signals
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for Foodbuy USA in 2026.
Incidents vs Food and Beverage Services Industry Avg (This Year)
Krispy Kreme has 8.26% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Foodbuy USA (X = Date, Y = Severity)
Foodbuy USA cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Krispy Kreme (X = Date, Y = Severity)
Krispy Kreme cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Foodbuy USA

Krispy Kreme
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.