What is the official website of Gruppo Comifar ?

The official website of Gruppo Comifar is http://www.comifar.it/.

What is Gruppo Comifar's cybersecurity risk score?

Gruppo Comifar has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Gruppo Comifar experienced?

According to Rankiteo, Gruppo Comifar currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Gruppo Comifar been affected by any supply chain cyber incidents ?

According to Rankiteo, Gruppo Comifar has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Gruppo Comifar have SOC 2 Type 1 certification ?

According to Rankiteo, Gruppo Comifar is not certified under SOC 2 Type 1.

Does Gruppo Comifar have SOC 2 Type 2 certification ?

According to Rankiteo, Gruppo Comifar does not hold a SOC 2 Type 2 certification.

Does Gruppo Comifar comply with GDPR ?

According to Rankiteo, Gruppo Comifar is not listed as GDPR compliant.

Does Gruppo Comifar have PCI DSS certification ?

According to Rankiteo, Gruppo Comifar does not currently maintain PCI DSS compliance.

Does Gruppo Comifar comply with HIPAA ?

According to Rankiteo, Gruppo Comifar is not compliant with HIPAA regulations.

Does Gruppo Comifar have ISO 27001 certification ?

According to Rankiteo,Gruppo Comifar is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Gruppo Comifar operate in ?

Gruppo Comifar operates primarily in the Transportation, Logistics, Supply Chain and Storage industry.

How many employees does Gruppo Comifar have ?

Gruppo Comifar employs approximately 853 people worldwide.

Does Gruppo Comifar own any subsidiaries ?

Gruppo Comifar presently has no subsidiaries across any sectors.

How many LinkedIn followers does Gruppo Comifar have ?

Gruppo Comifar's official LinkedIn profile has approximately 22,628 followers.

What is the NAICS classification code for Gruppo Comifar ?

Gruppo Comifar is classified under the NAICS code 47, which corresponds to Transportation and Warehousing.

Does Gruppo Comifar have a Crunchbase profile ?

No, Gruppo Comifar does not have a profile on Crunchbase.

Does Gruppo Comifar have a LinkedIn profile ?

Yes, Gruppo Comifar maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/gruppocomifar.

How many cybersecurity incidents has Gruppo Comifar experienced ?

As of June 20, 2026, Rankiteo reports that Gruppo Comifar has not experienced any cybersecurity incidents.

How many peer or competitor companies does Gruppo Comifar have ?

Gruppo Comifar has an estimated 6,631 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Gruppo Comifar

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Gruppo Comifar Vendor Cyber Rating & Cyber Score

comifar.it

Add Your Compliance Badge

Il leader italiano della distribuzione farmaceutica. Il Gruppo Comifar è il principale operatore della distribuzione farmaceutica italiana, con una quota di mercato di circa il 19%. Il Gruppo Comifar opera attraverso quattro società specializzate nella distribuzione farmaceutica, per offrire un servizio di elevata qualità alle circa 13.000 farmacie clienti: Comifar Distribuzione S.p.A., attiva nell'Italia peninsulare e in Sicilia, SPEM S.p.A., estesa attualmente su tutto il territorio nazionale, Farcopa Distribuzione S.r.l., attiva in Lombardia, Piemonte ed Emilia Romagna, Difarma S.p.A., attiva in Sardegna, e Farmacie Fiorentine A.Fa.M. S.p.A., attraverso le 21 farmacie di Firenze. Il Gruppo può contare su 21 unità distributive e 3

Gruppo Comifar A.I CyberSecurity Scoring

Scoring History

Gruppo Comifar

Gruppo Comifar CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Gruppo Comifar Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Gruppo Comifar

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Gruppo Comifar in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Gruppo Comifar in 2026.

Incident Types Gruppo Comifar vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Gruppo Comifar in 2026.

Incident History - Gruppo Comifar (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Gruppo Comifar Subsidiaries

Parent Company

Gruppo Comifar

Transportation, Logistics, Supply Chain and Storage

Website: http://www.comifar.it/

Company Size: 853

No subsidiary data available for this company.

Loading…

Gruppo Comifar Similar Companies

UPS Supply Chain Solutions

ups.com

UPS Supply Chain Solutions offers a comprehensive portfolio of services to enhance customers' business performance, including logistics and distribution, transportation and freight, consulting, customs brokerage, and international trade services. UPS provides the expertise and the scale to meet the total supply chain needs of customers worldwide, whether it requires the movement of goods, information or funds.

DTDC Express Limited

linktr.ee

DTDC Express Ltd is one of India’s leading integrated express logistics company offering domestic and international services. DTDC offers a comprehensive range of technology-enabled logistics services, serving a wide spectrum of customers across diverse industry verticals. Today, DTDC operates India’s largest physically accessible express logistics network and has over 15,000 exclusive channel partners which contribute to its sales and service capabilities.

GEODIS

geodis.com

GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group. 

MSC Mediterranean Shipping Company

msc.com

MSC is a privately owned global shipping company founded in 1970 by Gianluigi Aponte. As one of the world’s leading container shipping lines with headquarters in Geneva, Switzerland, MSC operates in over 675 offices across more than 155 countries worldwide with over 200,000 MSC Group employees. With access to an integrated network of road, rail and sea transport resources which stretches across the globe, the company prides itself on delivering global service with local knowledge. OUR SERVICES MSC is a world leader in global container shipping and a company offering global service with local knowledge. MSC also provides integrated network of road, rail and sea transport resources which stretches across the globe. YOUR INDUSTRY Bringing you industry-specific expertise; whatever you’re shipping, wherever you’re shipping it. MSC delivers a professional, efficient service tailored to the specific needs of your business. Our services are designed around you.

DSV - Global Transport and Logistics

dsv.com

At DSV, we keep supply chains flowing in a world of change. We provide and manage supply chain solutions for thousands of companies every day – from small family-run businesses to large global corporations. Our reach is global, yet our presence is local and close to our customers. Approx. 160,000 employees in over 90 countries work passionately to deliver great customer experiences and high-quality services. We aspire to lead the way towards a more sustainable future for our industry and are committed to trading on nature’s terms. DSV is a dynamic organisation that fosters inclusivity and diversity. We conduct our business with integrity, respecting different cultures and the dignity and rights of individuals. Read more at www.dsv.com.

Aramex

aramex.com

Founded in 1982, Aramex has emerged as a global leader in logistics and transportation, renowned for its innovative services tailored to businesses and consumers. As a listed company on the Dubai Financial Market (since 2005) and headquartered in the UAE, our strategic location facilitates extensive customer reach worldwide, bridging the gap between East and West. With operations in 600+ cities across 70 countries, Aramex employs over 16,000 professionals. Our success is attributed to four distinct business products that provide scalable, diversified, and end-to- end services for customers. These products are: • International Express, encompassing Aramex's Parcel Forwarding Business (Shop & Ship and MyUS). • Domestic Express • Freight Forwarding • Logistics & Supply Chain Solutions Sustainability is at the core of our vision and mission. To build a truly sustainable business, we leverage our core competencies to make a positive impact as responsible members of the communities we serve. Through partnerships with local and international organizations, we strive to expand our reach and benefit more individuals through targeted programs and initiatives, ensuring long-term positive change and community development. For more information, please visit us: www.aramex.com

DP World

dpworld.com

Trade is the lifeblood of the global economy, creating opportunities and improving the quality of life for people around the world. DP World exists to make the world’s trade flow better, changing what’s possible for the customers and communities we serve globally. With a dedicated, diverse and professional team of more than 119,000 employees from 164 nationalities, spanning 83 countries on six continents and 560+ business units, DP World is pushing trade further and faster towards a seamless supply chain that’s fit for the future. We’re rapidly transforming and integrating our businesses -- Ports and Terminals, Marine Services, Logistics and Technology – and uniting our global infrastructure with local expertise to create stronger, more efficient end-to-end supply chain solutions that can change the way the world trades. What's more, we're reshaping the future by investing in innovation. From intelligent delivery systems to automated warehouse stacking, we’re at the cutting edge of disruptive technology, pushing the sector towards better ways to trade, minimising disruptions from the factory floor to the customer’s door. WE MAKE TRADE FLOW TO CHANGE WHAT'S POSSIBLE FOR EVERYONE

Kuehne+Nagel

cb kuehne-nagel.com

With more than 82,000 employees at almost 1,300 sites in close to 100 countries, the Kuehne+Nagel Group is one of the world's leading logistics providers. Headquartered in Switzerland, Kuehne+Nagel is listed in the Swiss blue-chip stock market index, the SMI. The Group is the global number one in air and sea logistics and has strong market positions in road and contract logistics. Kuehne+Nagel is the logistics partner of choice for 400,000 customers worldwide. Using its global network, logistics expertise and data-based insights, the Group provides end-to-end supply chain solutions for global companies and industries.

Transnet SOC Ltd

transnet.net

As the custodian of ports, rail and pipelines, Transnet’s objective is to ensure a globally competitive freight system that enables sustained growth and diversification of the country’s economy. As a state-owned company, Transnet continues to leave an indelible mark on the lives of all South Africans. With a geographical footprint that covers our entire country, Transnet is inextricably involved in all aspects of life in South Africa. Through the Transnet Foundation - which is the Corporate Social Investment arm of Transnet - we have invested time and money in several diverse programmes around the country that provide much-needed succour to our communities. Looking ahead, Transnet is focused on modernizing infrastructure, driving growth, and enhancing efficiency through strategic partnerships. Our vision is clear: to contribute meaningfully to South Africa’s economic aspirations through sustainable growth and modernization.

Loading…

NEWS

Gruppo Comifar CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56082

SUMMARY

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and callable with only the public Supabase publishable (sb_publishable_*) anon key. An unauthenticated attacker can insert rows into public.build_logs for arbitrary organizations and, because the function uses ON CONFLICT (build_id, org_id) DO UPDATE, can overwrite existing usage/billing records by reusing the same build_id for a target org. This enables cross-tenant tampering of billing build logs and financial-impact denial of service by inflating billable build time.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56081

SUMMARY

Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim's identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-56080

SUMMARY

Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and successfully changes their password to a compliant one, the backend does not update the password-compliance state. As a result, the backend continues to treat the account as non-compliant and repeatedly forces password-reset prompts, permanently locking the Super Admin out of organization access (organization lockout / denial of service) despite valid authentication.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 4.9)

cvss3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.2

REFERENCES

CVE-2026-56079

SUMMARY

Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-scoped read API keys to access other tenants' webhook secrets and delivery logs. Attackers can query the webhooks and webhook_deliveries endpoints to exfiltrate HMAC signing secrets and delivery payloads, enabling forged webhook events against victim organizations.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-56073

SUMMARY

Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email verification by modifying server responses. Attackers can intercept OTP verification requests and manipulate HTTP responses to falsely mark verification successful, enabling unauthorized 2FA enablement and account takeover.

Published

Date2026-06-19

Updated

Date2026-06-19

RISK INFORMATION (Score: 9.4)

cvss3

Base Score: 9.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…