Comparison Overview

Grupo Bimbo

VS

Greene King

Grupo Bimbo

Last Update: 2025-11-22
Between 750 and 799

NOURISHING A BETTER WORLD With more than 148,000 associates in 34 countries , we are the biggest bakery in the world! At Grupo Bimbo we are committed to work in a sustainable way for a better world and to generate economic development in 4 continents. We strive to improve the lifestyle of the communities where we have presence and to become good neighbors. We are investing in technology and innovation to reduce our environmental footprint. *We value the person and foster a diversity and inclusion culture. *We operate in a responsible, efficient, productive and humane way, taking care of our environment. *We offer options for everyone and we promote healthy lifestyles.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 37,849
Subsidiaries: 5
12-month incidents
0
Known data breaches
2
Attack type number
1

Greene King

Greene King, Bury St Edmunds, undefined, IP33 1QT, GB
Last Update: 2025-11-21
Between 750 and 799

Greene King is the country’s leading pub company and brewer with c.2,600 pubs, restaurants and hotels across England, Wales and Scotland. At Greene King we are passionate about delivering our purpose to ‘pour happiness into lives’. That’s for our customers, our team, our pub partners, our suppliers and the communities in which we live, operate and serve. Founded in 1799 with offices in Bury St. Edmunds, Suffolk and Burton on Trent in Staffordshire we employ around 40,000 people across the group with three divisions: Greene King pubs, Destination Brands & Ventures, and Brewing & Brands. • Greene King pubs: Greene King pubs is our mainstream pub brand located where people and communities come together; pubs enjoyed in cities, towns and villages throughout the country with clear ambition to be “The Nation’s Most Loved Pub Brand”. Pub Partners runs our tenanted and leased pubs business and Hive Franchise pubs. • Destination Brands & Ventures: Destination Brands is a portfolio of distinct brands which includes Hungry Horse, Chef & Brewer, Farmhouse Inns and Flaming Grill that bring friends and family together, delivering great service, quality and value for money for a range of eating out and drinking occasions. Venture includes Hickory’s, Premium (Crafted Pubs & Metropolitan Pub Company) and Hotels which operate autonomously of Greene King’s managed pub brands. • Brewing & Brands covers the brewing sides of the business. Quality ales are brewed at the Westgate brewery in Bury St Edmunds and the Belhaven Brewery in Dunbar. Our industry-leading portfolio includes Greene King IPA, Old Speckled Hen, Abbot Ale, Ice Breaker and Belhaven Best and our premium beers, Level Head and Flint Eye, brewed for the modern-day drinker.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 11,417
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/grupobimbo.jpeg
Grupo Bimbo
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/greeneking.jpeg
Greene King
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Grupo Bimbo
100%
Compliance Rate
0/4 Standards Verified
Greene King
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for Grupo Bimbo in 2025.

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for Greene King in 2025.

Incident History — Grupo Bimbo (X = Date, Y = Severity)

Grupo Bimbo cyber incidents detection timeline including parent company and subsidiaries

Incident History — Greene King (X = Date, Y = Severity)

Greene King cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/grupobimbo.jpeg
Grupo Bimbo
Incidents

Date Detected: 2/2024
Type:Breach
Blog: Blog

Date Detected: 2/2024
Type:Breach
Attack Vector: External System Breach (Hacking)
Blog: Blog
https://images.rankiteo.com/companyimages/greeneking.jpeg
Greene King
Incidents

No Incident

FAQ

Grupo Bimbo company demonstrates a stronger AI Cybersecurity Score compared to Greene King company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Grupo Bimbo company has historically faced a number of disclosed cyber incidents, whereas Greene King company has not reported any.

In the current year, Greene King company and Grupo Bimbo company have not reported any cyber incidents.

Neither Greene King company nor Grupo Bimbo company has reported experiencing a ransomware attack publicly.

Grupo Bimbo company has disclosed at least one data breach, while the other Greene King company has not reported such incidents publicly.

Neither Greene King company nor Grupo Bimbo company has reported experiencing targeted cyberattacks publicly.

Neither Grupo Bimbo company nor Greene King company has reported experiencing or disclosing vulnerabilities publicly.

Neither Grupo Bimbo nor Greene King holds any compliance certifications.

Neither company holds any compliance certifications.

Both Greene King company and Grupo Bimbo company have a similar number of subsidiaries worldwide.

Grupo Bimbo company employs more people globally than Greene King company, reflecting its scale as a Food and Beverage Services.

Neither Grupo Bimbo nor Greene King holds SOC 2 Type 1 certification.

Neither Grupo Bimbo nor Greene King holds SOC 2 Type 2 certification.

Neither Grupo Bimbo nor Greene King holds ISO 27001 certification.

Neither Grupo Bimbo nor Greene King holds PCI DSS certification.

Neither Grupo Bimbo nor Greene King holds HIPAA certification.

Neither Grupo Bimbo nor Greene King holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H