Comparison Overview
John Lewis Partnership

John Lewis Partnership
Carlisle Place, London, England, GB, SW1P 1BX
Last Update: 29/03/2026
We’re the largest employee owned business in the UK and home of our cherished brands, John Lewis and Waitrose. We’re not just employees, we’re Partners, driven by our purpose to build a happier world. As we look to our future, there’s never been a more exciting time to ...

The TJX Companies, Inc.
770 Cochituate Road, Framingham, 01701, US
Last Update: 29/05/2026
TJX is the leading off-price apparel and home fashions retailer in the U.S. and worldwide, with four global home offices, seven brands, nearly 4,700 stores in nine countries, and five distinctive branded e-commerce sites. As Associates, we make a difference with our con...
Compliance Ranges Comparison

John Lewis Partnership







The TJX Companies, Inc.






Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for John Lewis Partnership in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for The TJX Companies, Inc. in 2026.
Incident History - John Lewis Partnership (X = Date, Y = Severity)
John Lewis Partnership cyber incidents detection timeline including parent company and subsidiaries.
Incident History - The TJX Companies, Inc. (X = Date, Y = Severity)
The TJX Companies, Inc. cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

John Lewis Partnership

The TJX Companies, Inc.
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.