Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

Grupo Carrefour BrasilGrupo Carrefour Brasil
VS
Hy-Vee, Inc.Hy-Vee, Inc.
Grupo Carrefour Brasil

Grupo Carrefour Brasil

Avenida Tucunaré 125, Barueri, São Paulo, BR, 06460-020

Last Update: 04/04/2026

View Profile
818/1000Good

Reunimos uma equipe com mais de 70.000 colaboradores que representam a diversidade deste país. Hoje, somos um dos maiores empregadores do Brasil. Junto com os nossos fornecedores e parceiros, estamos comprometidos em satisfazer e encantar os consumidores todos os dias, ...

NAICS:43
NAICS Definition:Retail Trade
Employees:13,586
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0
Hy-Vee, Inc.

Hy-Vee, Inc.

5820 Westown Parkway, West Des Moines, 50266, US

Last Update: 02/04/2026

View Profile
Between 750 and 799
http://hy-vee.com
790/1000Fair

Hy-Vee, Inc. is an employee-owned corporation operating more than 563 business units across nine Midwestern states with sales of more than $13 billion annually. The supermarket chain is synonymous with quality, variety, convenience, healthy lifestyles, culinary expertis...

NAICS:43
NAICS Definition:Retail Trade
Employees:17,929
Subsidiaries:1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
Grupo Carrefour Brasil

Grupo Carrefour Brasil

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Hy-Vee, Inc.

Hy-Vee, Inc.

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Grupo Carrefour Brasil in 2026.

Incidents

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Hy-Vee, Inc. in 2026.

Incidents

Incident History - Grupo Carrefour Brasil (X = Date, Y = Severity)

Grupo Carrefour Brasil cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Hy-Vee, Inc. (X = Date, Y = Severity)

Hy-Vee, Inc. cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Grupo Carrefour Brasil

Grupo Carrefour Brasil

Incidents
No explicit notable incidents reported.
Hy-Vee, Inc.

Hy-Vee, Inc.

Incidents
No explicit notable incidents reported.

FAQ

Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has the best AI Cybersecurity Score ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced more cyber incidents in the past ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced more cyber incidents this year ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced at least one ransomware attack ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced at least one data breach ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced at least one targeted cyberattack ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has experienced at least one vulnerability ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one holds the most compliance certifications ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one holds the fewest compliance certifications ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has the most subsidiaries ?
Between Grupo Carrefour Brasil company and Hy-Vee, Inc. company, which one has the largest number of employees ?
Between Grupo Carrefour Brasil and Hy-Vee, Inc., which company holds both SOC 2 Type 1 certifications ?
Between Grupo Carrefour Brasil and Hy-Vee, Inc., which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Grupo Carrefour Brasil or Hy-Vee, Inc. ?
Which company is PCI DSS compliant - Grupo Carrefour Brasil or Hy-Vee, Inc. ?
Between Grupo Carrefour Brasil and Hy-Vee, Inc., which company complies with HIPAA regulations for healthcare data ?
Between Grupo Carrefour Brasil and Hy-Vee, Inc., which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-77648
SUMMARY

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.

PUBLISHED
Date2026-08-20
UPDATED
Date2026-08-20
RISK INFORMATION (Score: 2.2)
CVSS3
Base Score: 2.2
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
0.7
CVE-2026-77647
SUMMARY

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.

PUBLISHED
Date2026-08-20
UPDATED
Date2026-08-20
RISK INFORMATION (Score: 9.8)
CVSS3
Base Score: 9.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
IMPACT SCORE
5.9
EXPLOITABILITY
3.9
CVE-2026-77113
SUMMARY

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.

PUBLISHED
Date2026-08-20
UPDATED
Date2026-08-20
RISK INFORMATION (Score: )
CVSS4
Base Score: 6.7
Complexity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
NA
EXPLOITABILITY
NA
CVE-2026-77646
SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

PUBLISHED
Date2026-08-20
UPDATED
Date2026-08-20
RISK INFORMATION (Score: )
CVSS4
Base Score: 7.7
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Red
IMPACT SCORE
NA
EXPLOITABILITY
NA
CVE-2026-77645
SUMMARY

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

PUBLISHED
Date2026-08-20
UPDATED
Date2026-08-20
RISK INFORMATION (Score: )
CVSS4
Base Score: 9.2
Complexity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red
IMPACT SCORE
NA
EXPLOITABILITY
NA