H-E-B
Company Details
Linkedin ID:
heb
Website:
Employees number:
45,093
Number of followers:
280,910
NAICS:
43
Industry Type:
Homepage:
heb.com
IP Addresses:
0
Company ID:
H-E_2011458
Scan Status:
In-progress
H-E-B Company CyberSecurity Posture
heb.com
H-E-B is headquartered in San Antonio, Texas with approximately $32 billion in revenue and 117,000+ Partners. Founded in 1905, H-E-B operates more than 400 stores in a number of formats, including superstores, supermarkets and gourmet markets. H-E-B is the #1 food retailer in the Austin, San Antonio, Houston, Corpus Christi and Rio Grande Valley markets. Our company is the largest private company in Texas and one of the 15 largest privately held companies in the U.S. Our employees are called Partners. That's because we work together to build our company and create a sense of community here in Texas. Working here is more than a job. It's a chance work with many great people and blaze an exciting career path.
H-E-B A.I CyberSecurity Scoring
H-E-B Risk Score (AI oriented)Between 800 and 849
H-E-B
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
H-E-B Global Score (TPRM)XXXX
H-E-B
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
H-E-B Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
H-E-B Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for H-E-B
Incidents vs Retail Industry Average (This Year)
No incidents recorded for H-E-B in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for H-E-B in 2025.
Incident Types H-E-B vs Retail Industry Avg (This Year)
No incidents recorded for H-E-B in 2025.
Incident History — H-E-B (X = Date, Y = Severity)
H-E-B cyber incidents detection timeline including parent company and subsidiaries
H-E-B Company Subsidiaries
H-E-B is headquartered in San Antonio, Texas with approximately $32 billion in revenue and 117,000+ Partners. Founded in 1905, H-E-B operates more than 400 stores in a number of formats, including superstores, supermarkets and gourmet markets. H-E-B is the #1 food retailer in the Austin, San Antonio, Houston, Corpus Christi and Rio Grande Valley markets. Our company is the largest private company in Texas and one of the 15 largest privately held companies in the U.S. Our employees are called Partners. That's because we work together to build our company and create a sense of community here in Texas. Working here is more than a job. It's a chance work with many great people and blaze an exciting career path.
Loading...
H-E-B Similar Companies
Food Lion
Food Lion, based in Salisbury, N.C., and its 82,000 associates have a longstanding history of serving its customers and communities through 10 Southeastern and Mid-Atlantic states. Since 1957, we have been connected to the towns and cities we serve by providing an easy shopping experience anchored b
Landmark Group
Founded in 1973 in Bahrain, Landmark Group has grown to become one of the largest and most successful omnichannel retail and hospitality conglomerates, with presence across 17 countries in the Middle East, Africa, India and Southeast Asia. Based in the UAE since 1990, the Group owns and operates 21
PT. Trans Retail Indonesia
Pada bulan Januari 2013, Trans Corp melalui anak perusahaannya, PT Trans Ritel mengambil alih 100% saham PT Carrefour Indonesia sehingga nama perusahaan pun berubah menjadi PT Trans Retail Indonesia. PT Trans Retail Indonesia berinovasi dalam memberikan standar pelayanan kelas dunia di industri r
Barnes & Noble proudly serves America with approximately 600 bookstores across all fifty states, and are busy opening newly designed stores in communities nationwide. We are an innovator in publishing, retail, and digital media, including our award-winning NOOK® products and an expansive collectio
Grupo Pernambucanas
Somos a companhia que veste a vida dos brasileiros. O Grupo Pernambucanas é a marca que leva estilo, calor e facilidade para os brasileiros desde que nasceu. Que abre as portas para um universo de possibilidades que vão muito além das araras. É a marca que tem o olhar para a sociedade, buscando
John Lewis Partnership
Working in Partnership for a happier world. Our Partnership is an ongoing experiment to find happier, more trusted ways of doing business, for the benefit of us all. We work together to create a successful business and a fairer, more sustainable future for Partners, customers, suppliers and communi
DMart - Avenue Supermarts Ltd
“DMart is a one-stop supermarket chain that aims to offer customers a wide range of basic home and personal products under one roof. Each DMart store stocks home utility products - including food, toiletries, beauty products, garments, kitchenware, bed and bath linen, home appliances and more - avai
Primark
Primark is an international fashion retailer employing more than 80,000 colleagues across 17 countries in Europe and the US. Founded in Ireland in 1969 under the Penneys brand, Primark aims to provide affordable choices for everyone, from great quality everyday essentials to stand-out style across w
ICA Gruppen
ICA Gruppen´s core business is retail. The Group includes ICA Sweden which mainly conduct grocery retail, ICA Real Estate which owns and manages properties, ICA Bank which offers financial services and insurances, Apotek Hjärtat which conducts pharmacy operations. Guidelines: Comments in our chan
.png)
H-E-B CyberSecurity News
November 07, 2025 08:00 AM
Police seek public’s help finding suspect in H-E-B robbery
The Austin Police Department seeks public help to find a suspect wanted in connection with a robbery that happened at a north Austin H-E-B...
November 01, 2025 07:00 AM
Minister Hebbalkar commends city police’s efforts
Udupi: Minister of women and child development and Udupi district minister, Laxmi Hebbalkar, praised the Mangaluru City police's actions...
November 01, 2025 07:00 AM
'Be role models': Laxmi Hebbalkar tells Pradeep Eshwar, Pratap Simha
UDUPI: Minister for women and child development, Laxmi Hebbalkar, told Congress MLA Pradeep Eswar and former BJP MP Pratap Simha to be role...
October 31, 2025 07:00 AM
Indira Gandhi is my source of inspiration: Hebbalkar
Mangaluru: Former Prime Minister Indira Gandhi lived up to her title as the 'Iron Lady'. Her personality is a model for the entire world,...
October 31, 2025 07:00 AM
Former PM Indira Gandhi source of inspiration for me: Karnataka minister Laxmi Hebbalkar
Minister Laxmi Hebbalkar lauded Indira Gandhi as an 'Iron Lady' and a global role model, highlighting her leadership in economic reforms and...
October 31, 2025 07:00 AM
Documents show plans for second H-E-B in Lubbock in the works
After five years of saying it did not have plans to build a second location, a site plan for another H-E-B has been filed with the Lubbock...
October 30, 2025 07:00 AM
$1 glow sticks at H-E-B recalled across Texas
H-E-B has issued a recall for a pack of budget-friendly glow stick bracelets because one of the colors can leak, according to a recall...
October 24, 2025 07:00 AM
H-E-B's newest 'mystery' gifts have Texans going crazy
Keychain designs included miniature replications of beloved store products, like sweet tea, flour tortillas, Cafe Olé, Creamy Creations,...
October 18, 2025 07:00 AM
Watch: Victor Wembanyama, De'Aaron Fox star in new H-E-B commercial
De'Aaron Fox and Stephon Castle are both making their H-E-B commercial debuts this season.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
H-E-B CyberSecurity History Information
Official Website of H-E-B
The official website of H-E-B is https://careers.heb.com.
H-E-B’s AI-Generated Cybersecurity Score
According to Rankiteo, H-E-B’s AI-generated cybersecurity score is 807, reflecting their Good security posture.
How many security badges does H-E-B’ have ?
According to Rankiteo, H-E-B currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does H-E-B have SOC 2 Type 1 certification ?
According to Rankiteo, H-E-B is not certified under SOC 2 Type 1.
Does H-E-B have SOC 2 Type 2 certification ?
According to Rankiteo, H-E-B does not hold a SOC 2 Type 2 certification.
Does H-E-B comply with GDPR ?
According to Rankiteo, H-E-B is not listed as GDPR compliant.
Does H-E-B have PCI DSS certification ?
According to Rankiteo, H-E-B does not currently maintain PCI DSS compliance.
Does H-E-B comply with HIPAA ?
According to Rankiteo, H-E-B is not compliant with HIPAA regulations.
Does H-E-B have ISO 27001 certification ?
According to Rankiteo,H-E-B is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of H-E-B
H-E-B operates primarily in the Retail industry.
Number of Employees at H-E-B
H-E-B employs approximately 45,093 people worldwide.
Subsidiaries Owned by H-E-B
H-E-B presently has no subsidiaries across any sectors.
H-E-B’s LinkedIn Followers
H-E-B’s official LinkedIn profile has approximately 280,910 followers.
NAICS Classification of H-E-B
H-E-B is classified under the NAICS code 43, which corresponds to Retail Trade.
H-E-B’s Presence on Crunchbase
No, H-E-B does not have a profile on Crunchbase.
H-E-B’s Presence on LinkedIn
Yes, H-E-B maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/heb.
Cybersecurity Incidents Involving H-E-B
As of November 27, 2025, Rankiteo reports that H-E-B has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
H-E-B has an estimated 15,247 peer or competitor companies worldwide.
H-E-B CyberSecurity History Information
How many cyber incidents has H-E-B faced ?
Total Incidents: According to Rankiteo, H-E-B has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at H-E-B ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f
- https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc
- https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
- https://github.com/angular/angular/releases/tag/19.2.16
- https://github.com/angular/angular/releases/tag/20.3.14
- https://github.com/angular/angular/releases/tag/21.0.1
- https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=heb' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
