Comparison Overview

Q: Between Ingram Micro company and ITC Infotech company, which one has the best AI Cybersecurity Score ?

ITC Infotech company demonstrates a stronger AI Cybersecurity Score compared to Ingram Micro company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced more cyber incidents in the past ?

Ingram Micro company has historically faced a number of disclosed cyber incidents, whereas ITC Infotech company has not reported any.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced more cyber incidents this year ?

In the current year, ITC Infotech company and Ingram Micro company have not reported any cyber incidents.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced at least one ransomware attack ?

Ingram Micro company has confirmed experiencing a ransomware attack, while ITC Infotech company has not reported such incidents publicly.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced at least one data breach ?

Ingram Micro company has disclosed at least one data breach, while the other ITC Infotech company has not reported such incidents publicly.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced at least one targeted cyberattack ?

Neither ITC Infotech company nor Ingram Micro company has reported experiencing targeted cyberattacks publicly.

Q: Between Ingram Micro company and ITC Infotech company, which one has experienced at least one vulnerability ?

Neither Ingram Micro company nor ITC Infotech company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Ingram Micro company and ITC Infotech company, which one holds the most compliance certifications ?

Neither Ingram Micro nor ITC Infotech holds any compliance certifications.

Q: Between Ingram Micro company and ITC Infotech company, which one has the most subsidiaries ?

Ingram Micro company has more subsidiaries worldwide compared to ITC Infotech company.

Ingram Micro

3351 Michelson Drive, Suite 100, Irvine, CA, US, 92612

Last Update: 2026-01-21

View Profile

Between 650 and 699

http://www.ingrammicro.com

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to a highly diversified base of business-to-business technology experts. Through Ingram Micro Xvantage™, our AI-powered digital platform, we offer what we believe to be the industry’s first comprehensive business-to-consumer-like experience, integrating hardware and cloud subscriptions, personalized recommendations, instant pricing, order tracking, and billing automation. We also provide a broad range of technology services, including financing, specialized marketing, and lifecycle management, as well as technical pre- and post-sales professional support. Learn more at www.ingrammicro.com.

NAICS: 5415

NAICS Definition: Computer Systems Design and Related Services

Employees: 28,560

Subsidiaries: 13

12-month incidents

0

Known data breaches

1

Attack type number

2

View Profile

ITC Infotech

No.18, Banaswadi Main Road, Maruthiseva Nagar, Bangalore, Karnataka, IN, 560005

Last Update: 2026-01-18

Between 750 and 799

http://www.itcinfotech.com

ITC Infotech is a global technology solution and services leader providing business-friendly solutions, that enable future-readiness for clients. We seamlessly bring together digital expertise, strong industry-specific alliances, and deep domain expertise from ITC Group businesses. Our solutions and services are focused on Banking and financial Services, Healthcare, Manufacturing, Consumer Goods, Travel and Hospitality. ITC Infotech is a wholly-owned subsidiary of ITC Ltd, one of India’s most admired companies.

NAICS: 5415

NAICS Definition: Computer Systems Design and Related Services

Employees: 19,536

Subsidiaries: 1

12-month incidents

0

Known data breaches

0

Attack type number

0

Ingram Micro

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

ITC Infotech

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Ingram Micro in 2026.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for ITC Infotech in 2026.

Incident History — Ingram Micro (X = Date, Y = Severity)

Ingram Micro cyber incidents detection timeline including parent company and subsidiaries

Incident History — ITC Infotech (X = Date, Y = Severity)

ITC Infotech cyber incidents detection timeline including parent company and subsidiaries

Ingram Micro

Incidents

Date Detected: 7/2025

Type:Ransomware

Motivation: financial extortion (presumed)

Blog: Blog

Date Detected: 6/2024

Type:Breach

Blog: Blog

ITC Infotech

Incidents

No Incident

ITC Infotech company demonstrates a stronger AI Cybersecurity Score compared to Ingram Micro company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Ingram Micro company has historically faced a number of disclosed cyber incidents, whereas ITC Infotech company has not reported any.

In the current year, ITC Infotech company and Ingram Micro company have not reported any cyber incidents.

Ingram Micro company has confirmed experiencing a ransomware attack, while ITC Infotech company has not reported such incidents publicly.

Ingram Micro company has disclosed at least one data breach, while the other ITC Infotech company has not reported such incidents publicly.

Neither ITC Infotech company nor Ingram Micro company has reported experiencing targeted cyberattacks publicly.

Neither Ingram Micro company nor ITC Infotech company has reported experiencing or disclosing vulnerabilities publicly.

Neither Ingram Micro nor ITC Infotech holds any compliance certifications.

Neither company holds any compliance certifications.

Ingram Micro company has more subsidiaries worldwide compared to ITC Infotech company.

Ingram Micro company employs more people globally than ITC Infotech company, reflecting its scale as a IT Services and IT Consulting.

Neither Ingram Micro nor ITC Infotech holds SOC 2 Type 1 certification.

Neither Ingram Micro nor ITC Infotech holds SOC 2 Type 2 certification.

Neither Ingram Micro nor ITC Infotech holds ISO 27001 certification.

Neither Ingram Micro nor ITC Infotech holds PCI DSS certification.

Neither Ingram Micro nor ITC Infotech holds HIPAA certification.

Neither Ingram Micro nor ITC Infotech holds GDPR certification.

Description

SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss4

Base: 7.7

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

https://github.com/cloudflare/workers-sdk

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.1

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published

Date

2026-01-20

Updated

Date

2026-01-20

Risk Information

cvss3

Base: 8.2

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.oracle.com/security-alerts/cpujan2026.html

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Ingram Micro

VS

ITC Infotech

Ingram Micro

ITC Infotech

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Incident History — Ingram Micro (X = Date, Y = Severity)

Incident History — ITC Infotech (X = Date, Y = Severity)

Notable Incidents

No Incident

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2026-0933

Risk Information

CVE-2026-21990

Risk Information

CVE-2026-21989

Risk Information

CVE-2026-21988

Risk Information

CVE-2026-21987

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Ingram Micro

VS

ITC Infotech

Ingram Micro

ITC Infotech

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Incident History — Ingram Micro (X = Date, Y = Severity)

Incident History — ITC Infotech (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Ransomware ING1802018100325

🔒 Incident : Breach ING1769002251

No Incident

FAQ

Between Ingram Micro company and ITC Infotech company, which one has the best AI Cybersecurity Score ?

Between Ingram Micro company and ITC Infotech company, which one has experienced more cyber incidents in the past ?

Between Ingram Micro company and ITC Infotech company, which one has experienced more cyber incidents this year ?

Between Ingram Micro company and ITC Infotech company, which one has experienced at least one ransomware attack ?

Between Ingram Micro company and ITC Infotech company, which one has experienced at least one data breach ?

Between Ingram Micro company and ITC Infotech company, which one has experienced at least one targeted cyberattack ?

Between Ingram Micro company and ITC Infotech company, which one has experienced at least one vulnerability ?

Between Ingram Micro company and ITC Infotech company, which one holds the most compliance certifications ?

Between Ingram Micro company and ITC Infotech company, which one holds the fewest compliance certifications ?

Between Ingram Micro company and ITC Infotech company, which one has the most subsidiaries ?

Between Ingram Micro company and ITC Infotech company, which one has the largest number of employees ?

Between Ingram Micro and ITC Infotech, which company holds both SOC 2 Type 1 certifications ?

Between Ingram Micro and ITC Infotech, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Ingram Micro or ITC Infotech ?

Which company is PCI DSS compliant — Ingram Micro or ITC Infotech ?

Between Ingram Micro and ITC Infotech, which company complies with HIPAA regulations for healthcare data ?

Between Ingram Micro and ITC Infotech, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2026-0933

Risk Information

CVE-2026-21990

Risk Information

CVE-2026-21989

Risk Information

CVE-2026-21988

Risk Information

CVE-2026-21987

Risk Information