Comparison Overview
Hy-Vee, Inc.

Hy-Vee, Inc.
5820 Westown Parkway, West Des Moines, 50266, US
Last Update: 02/04/2026
Hy-Vee, Inc. is an employee-owned corporation operating more than 563 business units across nine Midwestern states with sales of more than $13 billion annually. The supermarket chain is synonymous with quality, variety, convenience, healthy lifestyles, culinary expertis...

American Eagle Outfitters Inc.
77 Hot Metal Street, Pittsburgh, PA, US, 15203
Last Update: 02/04/2026
American Eagle Outfitters (AEO) is a portfolio of unique, loved and enduring brands: American Eagle, Aerie, OFFL/NE by Aerie, Todd Snyder and Unsubscribed. We provide a welcoming and engaging customer and associate experience, and we embrace all. Merchandise assortments...
Compliance Ranges Comparison

Hy-Vee, Inc.







American Eagle Outfitters Inc.






Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Hy-Vee, Inc. in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for American Eagle Outfitters Inc. in 2026.
Incident History - Hy-Vee, Inc. (X = Date, Y = Severity)
Hy-Vee, Inc. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - American Eagle Outfitters Inc. (X = Date, Y = Severity)
American Eagle Outfitters Inc. cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Hy-Vee, Inc.

American Eagle Outfitters Inc.
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.