Comparison Overview

John Lewis & Partners

VS

Acosta

John Lewis & Partners

171 Victoria Street, London, England, undefined, GB
Last Update: 2025-12-17
View Profile
Between 750 and 799
http://www.jlpjobs.com

Since 1864 we've been delighting customers with our quality products and renowned customer service. We put happiness at the heart of everything we do. We our one brand under the John Lewis Partnership umbrella. A unique way of doing business where all of our Partners (employees) share ownership of the company. We’re on a journey, an ongoing experiment to find happier, more trusted ways of doing business and all of our Partners have a part to play. By joining the Partnership you’ll be joining a different kind of business. One that seeks to make a difference, not just to its Partners, but to the lives of everyone. It’s this shared purpose that drives us. Guides us. And we believe that by working together, in Partnership, we can help create a place with happier people, for a happier business and a happier world. #FindYourHappier #DrivenByPurpose

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,129
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Acosta

6600 Corporate Center Parkway, Jacksonville, FL, 32216, US
Last Update: 2025-12-17
Between 750 and 799
https://www.acosta.com

Acosta brings simplicity to retail sales. We act as a catalyst to boldly connect brands, retailers and consumers, fueling growth and building long-term value throughout North America and Europe. We are deeply embedded in every corner of the retail industry, strengthening the local, regional and national relationships between brands and retailers.​ Our team of experts uses deep industry insight, cutting-edge analytics and integrated partnerships to help our clients move ahead with confidence.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,991
Subsidiaries: 26
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/acosta.jpeg
Acosta
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
John Lewis & Partners
100%
Compliance Rate
0/4 Standards Verified
Acosta
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for John Lewis & Partners in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Acosta in 2025.

Incident History — John Lewis & Partners (X = Date, Y = Severity)

John Lewis & Partners cyber incidents detection timeline including parent company and subsidiaries

Incident History — Acosta (X = Date, Y = Severity)

Acosta cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
Incidents

No Incident

https://images.rankiteo.com/companyimages/acosta.jpeg
Acosta
Incidents

Date Detected: 3/2024
Type:Breach
Attack Vector: Inadvertent Disclosure
Blog: Blog

FAQ

John Lewis & Partners company demonstrates a stronger AI Cybersecurity Score compared to Acosta company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Acosta company has historically faced a number of disclosed cyber incidents, whereas John Lewis & Partners company has not reported any.

In the current year, Acosta company and John Lewis & Partners company have not reported any cyber incidents.

Neither Acosta company nor John Lewis & Partners company has reported experiencing a ransomware attack publicly.

Acosta company has disclosed at least one data breach, while John Lewis & Partners company has not reported such incidents publicly.

Neither Acosta company nor John Lewis & Partners company has reported experiencing targeted cyberattacks publicly.

Neither John Lewis & Partners company nor Acosta company has reported experiencing or disclosing vulnerabilities publicly.

Neither John Lewis & Partners nor Acosta holds any compliance certifications.

Neither company holds any compliance certifications.

Acosta company has more subsidiaries worldwide compared to John Lewis & Partners company.

Acosta company employs more people globally than John Lewis & Partners company, reflecting its scale as a Retail.

Neither John Lewis & Partners nor Acosta holds SOC 2 Type 1 certification.

Neither John Lewis & Partners nor Acosta holds SOC 2 Type 2 certification.

Neither John Lewis & Partners nor Acosta holds ISO 27001 certification.

Neither John Lewis & Partners nor Acosta holds PCI DSS certification.

Neither John Lewis & Partners nor Acosta holds HIPAA certification.

Neither John Lewis & Partners nor Acosta holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References