What is the official website of Inditex ?

The official website of Inditex is https://itx.to/inditexcareers-cfgW6G.

What is Inditex's cybersecurity risk score?

Inditex has an AI-generated cybersecurity risk score of 721 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Inditex experienced?

According to Rankiteo, Inditex currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Inditex been affected by any supply chain cyber incidents ?

According to Rankiteo, Inditex has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Carnival Corporation (Incident ID: INDPITCARBASZARHAL1777466463) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Bitsight (Incident ID: ZARIND1776328376) Anodot by Glassbox (Incident ID: ZAR1778228840)

Does Inditex have SOC 2 Type 1 certification ?

According to Rankiteo, Inditex is not certified under SOC 2 Type 1.

Does Inditex have SOC 2 Type 2 certification ?

According to Rankiteo, Inditex does not hold a SOC 2 Type 2 certification.

Does Inditex comply with GDPR ?

According to Rankiteo, Inditex is not listed as GDPR compliant.

Does Inditex have PCI DSS certification ?

According to Rankiteo, Inditex does not currently maintain PCI DSS compliance.

Does Inditex comply with HIPAA ?

According to Rankiteo, Inditex is not compliant with HIPAA regulations.

Does Inditex have ISO 27001 certification ?

According to Rankiteo,Inditex is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Inditex operate in ?

Inditex operates primarily in the Retail industry.

How many employees does Inditex have ?

Inditex employs approximately 75,209 people worldwide.

Does Inditex own any subsidiaries ?

Inditex presently has no subsidiaries across any sectors.

How many LinkedIn followers does Inditex have ?

Inditex's official LinkedIn profile has approximately 1,719,241 followers.

What is the NAICS classification code for Inditex ?

Inditex is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Inditex have a Crunchbase profile ?

No, Inditex does not have a profile on Crunchbase.

Does Inditex have a LinkedIn profile ?

Yes, Inditex maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/inditex.

How many cybersecurity incidents has Inditex experienced ?

As of August 2, 2026, Rankiteo reports that Inditex has experienced 4 cybersecurity incidents.

How many peer or competitor companies does Inditex have ?

Inditex has an estimated 15,935 peer or competitor companies worldwide.

What types of cybersecurity incidents has Inditex faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Inditex

Boost Score +25 with badge (5 left)

721

/1000

Moderate

746

/1000

Moderate

Inditex Vendor Cyber Rating & Cyber Score

itx.to

Add Your Compliance Badge

What is Inditex? Inditex comprises seven brands: Zara, Pull&Bear, Massimo Dutti, Bershka, Stradivarius, Oysho and Zara Home. We sell in 213 markets through our online platforms and our over 5.800 stores. But… What is Inditex? We are the clothes you choose to wear, the products with which you decorate your home, or celebrate a special occasion. You choose us. We are decisive. We trust in the ability and instincts of our professional team. We have got to where we are today thanks to them and the hard work of those people who have shown us where we can improve. We reinvent ourselves, we correct our mistakes and we keep moving forward. We react. #morethanajob

Inditex A.I CyberSecurity Scoring

Scoring History

Inditex

Inditex CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Inditex

Breach

4/2026

Carnival Corpor...

INDPITCARBASZAR...

Inditex

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Inditex

Breach

4/2026

Bitsight

ZARIND177632837...

Inditex

Breach

4/2026

Anodot by Glass...

ZAR1778228840

Loading…

A.I.

Inditex Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Inditex

Incidents vs Retail Industry Avg (This Year)

Inditex has 115.05% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Inditex has 288.35% more incidents than the average of all companies with at least one recorded incident.

Incident Types Inditex vs Retail Industry Avg (This Year)

Inditex reported 4 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 4 data breaches, compared to industry peers with at least 1 incident.

Incident History - Inditex (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Inditex Subsidiaries

Inditex

Retail

Website: https://itx.to/inditexcareers-cfgW6G

Company Size: 10,001+ employees

BershkaRetail Apparel and Fashion

Massimo DuttiRetail

StradivariusRetail Apparel and Fashion

Tempe InditexRetail Apparel and Fashion

Uterqüe (Inditex)Retail Apparel and Fashion

Loading…

Inditex Similar Companies

Skechers

skechers.com

Skechers is a Fortune 500® company — a growth-oriented brand that designs, develops, and markets a diverse product portfolio of lifestyle and performance footwear, apparel and accessories for men, women and children around the globe. Skechers is focused on designing products that deliver style, comfort, innovation, and quality at a reasonable price.

Hy-Vee, Inc.

cb hy-vee.com

Hy-Vee, Inc. is an employee-owned corporation operating more than 563 business units across nine Midwestern states with sales of more than $13 billion annually. The supermarket chain is synonymous with quality, variety, convenience, healthy lifestyles, culinary expertise and superior customer service. Hy-Vee was recently named the No. 1 grocery store in America by USA TODAY. The company’s more than 75,000 employees provide “A Helpful Smile in Every Aisle” to customers every day.

Costco Wholesale

costco.com

Costco Wholesale is a multibillion dollar global retailer with warehouse club operations in 14 countries. We are the recognized leader in our field, dedicated to quality in every area of our business and respected for our outstanding business ethics. Despite our large size and rapid international expansion, we continue to provide an atmosphere in which our employees thrive and succeed. If you are an ambitious, energetic person who enjoys a fast-paced team environment filled with challenges and opportunities, you've come to the right place. Our successful employees are service-oriented with integrity and commitment toward a common goal of excellence. Costco offers great jobs, great pay, great benefits and a great place to work. Like us on Facebook: www.facebook.com/Costco Follow us on Pinterest: www.pinterest.com/Costco

Asda

asda.jobs

It’s hard for anyone to imagine just how many different career possibilities there are at Asda. Ours is a big business, and beyond the roles you might be familiar with on the shop floor (or on your doorstep), there are hundreds of others you don’t get to see. In fact, because our business is changing so rapidly, there are new roles being created at Asda all the time. Technology is changing how we do things every day, helping us to reimagine retail to make life better for our customers, in-store and online. For those with imagination, can-do, integrity and a willingness to embrace change, the possibilities at Asda are limitless. Take a look around and see where a career at Asda could take you.

MAP Group Asia

map.co.id

MAP Group Asia is Indonesia’s leading retail organization with an expanding presence across Southeast Asia. Our diverse portfolio includes Sports, Fashion, Digital, Department Stores, Kids, Food & Beverage, and Lifestyle. As a market leader, we are committed to building a resilient and future-focused retail ecosystem, anchored in digital innovation, diversity, inclusion, and talent development. Our mission is to bring health, happiness and a more fulfilling lifestyle to our valued customers through our portfolio of world class brands and omni-channel retail network. Learn more: www.map.co.id

Chico's FAS, Inc.

chicos.com

Our passion for fashion and desire to inspire confidence and joy have been guiding the creation of our women’s clothing, intimates, and accessories for more than 40 years. Our portfolio consists of three brands: Chico’s, WHBM, and Soma found in over 1,000 stores throughout the United States and online. Our commitment and dedication come from our loyal customers and devoted Associates, who are equally inspired by our values. If you share our passion for fashion, we invite you to join us. Visit: https://jobs.chicos.com/

LC Waikiki

lcwaikiki.com

We have been continuing our journey that we started in France in 1988, as a Turkish brand since 1997 under the structure of “LC Waikiki Mağazacılık Hizmetleri Ticaret A.Ş.”. We act with the philosophy of “Everyone deserves to dress well” and we are working to be one of the pioneers of the industry with our stores more than 1200 in 59 countries and 55.000+ employees. We offer our customers the pleasure of accessible fashion by offering quality products at affordable prices. We are expanding our international adventure, which we started by taking the first step in Romania in 2009, with the domestic and foreign investments we made, “We aim to be one of the top three most successful fashion retailers in Europe”.

Old Navy

gapinc.com

Forget what you know about old-school industry rules. When you work at Old Navy, you’re choosing a different path. From day one, we’ve been on a mission to democratize fashion and make shopping fun again. Our teams make style accessible to everyone, creating high-quality, must-have fashion essentials for the whole family, with love, season after season. We opened our first store in 1994 in San Francisco and have been on a roll ever since. Today, customers can find fabulous fashion at affordable prices online and in one of our 1,000+ stores globally. Old Navy celebrates a workplace that’s just as diverse as our customers. Fun, fashion, family and value are at the heart of everything we do. We cultivate a community of playful personalities that thrive in a fast-paced environment where our employees can be their most authentic selves. Here, we’re family. Old Navy – a brand for everyone, a place for you!

Toys"R"Us

toysrus.com

Toys“R”Us is a beloved brand known all around the world—and we know how to have fun! For over 70 years we've been the toy authority and ambassadors of all things play. Our new vision looks beyond traditional retail for a re-imagined, immersive experience for kids of all ages. We've got a whole new way to play, and we can't wait to share it with you!

Loading…

NEWS

Inditex CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 05, 2026 07:00 AM

The Chamber of Commerce of the Campo de Gibraltar, awarded at the national level for its digital entrepreneurship program in cybersecurity

The jury of the 2026 Chamber Awards recognizes the INCIBE Emprende initiative, developed together with the National Cybersecurity Institute...

Read Article

May 26, 2026 07:00 AM

H&M hires Inditex executive to strengthen its technology leadership

Swedish group H&M has appointed Diego Teijeiro Ruiz as its new chief information officer after an almost two-decade career at Inditex.

Read Article

May 20, 2026 07:00 AM

Zara Data Breach Exposes 197,400 Customers via Retired Provider Tokens

The Zara data breach exposed 197400 customer records after ShinyHunters used stolen Anodot tokens to lift them from a former technology...

Read Article

May 08, 2026 07:00 AM

Zara data breach exposed personal information of 197,000 people

Hackers who gained access to the databases of Spanish fast-fashion retailer Zara stole data belonging to more than 197000 customers,...

Read Article

April 24, 2026 07:00 AM

H&M hires former Inditex executive as CIO to drive digital transformation

H&M has appointed former Inditex executive Diego Teijeiro Ruiz as its new chief information officer as the fashion giant ramps up investment...

Read Article

April 23, 2026 07:00 AM

H&M appoints former Inditex executive as chief information officer

H&M has appointed former Inditex executive Diego Teijeiro Ruiz as its new chief information officer, effective 25 May.

Read Article

April 22, 2026 07:00 AM

H&M Taps Inditex Talent: Diego Teijeiro Appointed as New CIO

H&M signs in Inditex for its technology area, one of the axes for 2026 in its transformation plan. As Modaes has learned,...

Read Article

April 20, 2026 07:00 AM

Multiple other companies purportedly breached by ShinyHunters, over 9M record leak warned

Hacking operation ShinyHunters has claimed to have compromised nine major brands, including fast fashion retailer Zara, convenience store...

Read Article

April 18, 2026 07:00 AM

Zara owner Inditex reports unauthorised access to transaction databases

Inditex Data Breach: Inditex, the parent company of Zara, announces a data breach involving unauthorized access to transaction databases.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…