Comparison Overview
JCPenney

JCPenney
6502 Legacy Drive, Plano, 75024, US
Last Update: 02/04/2026
As we reinvent ourselves to fit the diversity of America, we are looking for motivated, talented people who can emerge as Warriors in our organization. JCPenney offers an inclusive environment and culture where you can find and define yourself - your style, your purpos...

Wegmans Food Markets
1500 Brooks Ave, Rochester, 14603-0844, US
Last Update: 06/05/2026
Wegmans Food Markets is a family-owned regional supermarket chain and one of the largest private companies in the US. Recognized as an industry leader and innovator, the company was founded in 1916 and employs over 53,000 people. Wegmans has been named one of the “100 B...
Compliance Ranges Comparison

JCPenney







Wegmans Food Markets






Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for JCPenney in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Wegmans Food Markets in 2026.
Incident History - JCPenney (X = Date, Y = Severity)
JCPenney cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Wegmans Food Markets (X = Date, Y = Severity)
Wegmans Food Markets cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

JCPenney

Wegmans Food Markets
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.