Comparison Overview

Gold's Gym

VS

American Heart Association

Gold's Gym

5420 Lyndon B Johnson Fwy, Suite 300, Dallas, Texas, US, 75240
Last Update: 2026-01-17
View Profile
Between 750 and 799
http://www.goldsgym.com

Gold’s Gym has been the world’s trusted fitness authority since 1965. From its beginning as a small gym in Venice, California, Gold’s Gym has grown into a global icon with more than 700 locations serving 3 million people across six continents each day. Whether you are an industry professional or interested in pursuing a dream to make your passion for Fitness a meaningful reality, we want to help you transform your life. Our journey started on a beach in California, yours starts today. Join our Talent Network to receive updates on open positions. http://www.goldsgym.com/join-our-team

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 16,850
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

American Heart Association

7272 Greenville Ave, Dallas, 75231-4596, US
Last Update: 2026-01-17
Between 750 and 799
http://www.heart.org

Welcome to the American Heart Association’s movement to change the future of health and be the progress that ensures longer, healthier lives for all. By driving breakthroughs in science, policy, and care – together -- we can overcome today’s biggest health challenges and transform lives every day. The American Heart Association is the nation’s oldest and largest voluntary organization dedicated to fighting heart disease and stroke. We are advocates of good health and promoters of positive behaviors, nutritious eating habits and healthy lifestyles. We also fund cutting-edge research and professional education programs. We promise to have an extraordinary impact on your life by empowering you and your loved ones to save lives, live healthier and enjoy more peace of mind about cardiovascular health. Join our communities: Facebook: http://facebook.com/AmericanHeart X: http://x.com/American_Heart YouTube: http://www.youtube.com/American_Heart Pinterest: http://pinterest.com/americanheart Instagram: http://instagram.com/american_heart TikTok: https://tiktok.com/@americanheartassociation Heart News: http://twitter.com/heartnews ASA Facebook: http://facebook.com/AmericanStroke ASA X: https://X.com/American_Stroke Science News: https://x.com/AHAScience CPR Facebook: https://www.facebook.com/AHACPR CPR X: https://x.com/heartCPR Go Red for Women Facebook: https://www.facebook.com/goredforwomen Go Red for Women X: http://twitter.com/goredforwomen Advocacy Facebook: https://www.facebook.com/yourethecure Advocacy X: https://x.com/AmHeartAdvocacy

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 11,074
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/american-heart-association.jpeg
American Heart Association
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gold's Gym
100%
Compliance Rate
0/4 Standards Verified
American Heart Association
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Gold's Gym in 2026.

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for American Heart Association in 2026.

Incident History — Gold's Gym (X = Date, Y = Severity)

Gold's Gym cyber incidents detection timeline including parent company and subsidiaries

Incident History — American Heart Association (X = Date, Y = Severity)

American Heart Association cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
Incidents

No Incident

https://images.rankiteo.com/companyimages/american-heart-association.jpeg
American Heart Association
Incidents

Date Detected: 2/2020
Type:Ransomware
Attack Vector: Ransomware
Blog: Blog

FAQ

Gold's Gym company demonstrates a stronger AI Cybersecurity Score compared to American Heart Association company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

American Heart Association company has historically faced a number of disclosed cyber incidents, whereas Gold's Gym company has not reported any.

In the current year, American Heart Association company and Gold's Gym company have not reported any cyber incidents.

American Heart Association company has confirmed experiencing a ransomware attack, while Gold's Gym company has not reported such incidents publicly.

Neither American Heart Association company nor Gold's Gym company has reported experiencing a data breach publicly.

Neither American Heart Association company nor Gold's Gym company has reported experiencing targeted cyberattacks publicly.

Neither Gold's Gym company nor American Heart Association company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gold's Gym nor American Heart Association holds any compliance certifications.

Neither company holds any compliance certifications.

American Heart Association company has more subsidiaries worldwide compared to Gold's Gym company.

Gold's Gym company employs more people globally than American Heart Association company, reflecting its scale as a Wellness and Fitness Services.

Neither Gold's Gym nor American Heart Association holds SOC 2 Type 1 certification.

Neither Gold's Gym nor American Heart Association holds SOC 2 Type 2 certification.

Neither Gold's Gym nor American Heart Association holds ISO 27001 certification.

Neither Gold's Gym nor American Heart Association holds PCI DSS certification.

Neither Gold's Gym nor American Heart Association holds HIPAA certification.

Neither Gold's Gym nor American Heart Association holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Azure Entra ID Elevation of Privilege Vulnerability

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References