Comparison Overview

Gilead Sciences

VS

Thermo Fisher Scientific

Gilead Sciences

333 Lakeside Drive, Foster City, CA, US, 94404
Last Update: 2025-12-09
Between 750 and 799

At Gilead, we set – and achieve – bold ambitions to create a healthier world for all people. From our pioneering virology medicines to our growing impact in oncology, we're delivering innovations once thought impossible in medicine. Our focus goes beyond medicines, and we also strive to remedy health inequities and break down barriers to care. We empower our people to tackle these challenges, and we’re all united in our commitment to help millions of people live healthier lives. Social Media Guidelines: https://www.gilead.com/social-media-guidelines

NAICS: 541714
NAICS Definition: Research and Development in Biotechnology (except Nanobiotechnology)
Employees: 14,615
Subsidiaries: 10
12-month incidents
1
Known data breaches
1
Attack type number
2

Thermo Fisher Scientific

168 Third Avenue, Waltham, MA, undefined, US
Last Update: 2025-12-10
Between 800 and 849

About Thermo Fisher Scientific Thermo Fisher Scientific Inc. is the world leader in serving science, with annual revenue of approximately $40 billion. Our Mission is to enable our customers to make the world healthier, cleaner and safer. Whether our customers are accelerating life sciences research, solving complex analytical challenges, increasing productivity in their laboratories, improving patient health through diagnostics or the development and manufacture of life-changing therapies, we are here to support them. Our global team delivers an unrivaled combination of innovative technologies, purchasing convenience and pharmaceutical services through our industry-leading brands, including Thermo Scientific, Applied Biosystems, Invitrogen, Fisher Scientific, Unity Lab Services, Patheon and PPD. For more information, please visit www.thermofisher.com.

NAICS: 541714
NAICS Definition: Research and Development in Biotechnology (except Nanobiotechnology)
Employees: 97,914
Subsidiaries: 18
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gilead-sciences.jpeg
Gilead Sciences
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/thermo-fisher-scientific.jpeg
Thermo Fisher Scientific
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gilead Sciences
100%
Compliance Rate
0/4 Standards Verified
Thermo Fisher Scientific
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Biotechnology Research Industry Average (This Year)

Gilead Sciences has 49.25% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Biotechnology Research Industry Average (This Year)

No incidents recorded for Thermo Fisher Scientific in 2025.

Incident History — Gilead Sciences (X = Date, Y = Severity)

Gilead Sciences cyber incidents detection timeline including parent company and subsidiaries

Incident History — Thermo Fisher Scientific (X = Date, Y = Severity)

Thermo Fisher Scientific cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gilead-sciences.jpeg
Gilead Sciences
Incidents

Date Detected: 2/2025
Type:Breach
Attack Vector: Human Error (Mailing Error)
Blog: Blog

Date Detected: 05/2020
Type:Cyber Attack
Attack Vector: Phishing, Server Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/thermo-fisher-scientific.jpeg
Thermo Fisher Scientific
Incidents

Date Detected: 7/2017
Type:Breach
Attack Vector: Email Compromise
Blog: Blog

FAQ

Thermo Fisher Scientific company demonstrates a stronger AI Cybersecurity Score compared to Gilead Sciences company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Gilead Sciences company has faced a higher number of disclosed cyber incidents historically compared to Thermo Fisher Scientific company.

In the current year, Gilead Sciences company has reported more cyber incidents than Thermo Fisher Scientific company.

Neither Thermo Fisher Scientific company nor Gilead Sciences company has reported experiencing a ransomware attack publicly.

Both Thermo Fisher Scientific company and Gilead Sciences company have disclosed experiencing at least one data breach.

Gilead Sciences company has reported targeted cyberattacks, while Thermo Fisher Scientific company has not reported such incidents publicly.

Neither Gilead Sciences company nor Thermo Fisher Scientific company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gilead Sciences nor Thermo Fisher Scientific holds any compliance certifications.

Neither company holds any compliance certifications.

Thermo Fisher Scientific company has more subsidiaries worldwide compared to Gilead Sciences company.

Thermo Fisher Scientific company employs more people globally than Gilead Sciences company, reflecting its scale as a Biotechnology Research.

Neither Gilead Sciences nor Thermo Fisher Scientific holds SOC 2 Type 1 certification.

Neither Gilead Sciences nor Thermo Fisher Scientific holds SOC 2 Type 2 certification.

Neither Gilead Sciences nor Thermo Fisher Scientific holds ISO 27001 certification.

Neither Gilead Sciences nor Thermo Fisher Scientific holds PCI DSS certification.

Neither Gilead Sciences nor Thermo Fisher Scientific holds HIPAA certification.

Neither Gilead Sciences nor Thermo Fisher Scientific holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X