Comparison Overview

John Lewis & Partners

VS

Metro Inc.

John Lewis & Partners

171 Victoria Street, London, England, undefined, GB
Last Update: 2025-12-17
View Profile
Between 750 and 799
http://www.jlpjobs.com

Since 1864 we've been delighting customers with our quality products and renowned customer service. We put happiness at the heart of everything we do. We our one brand under the John Lewis Partnership umbrella. A unique way of doing business where all of our Partners (employees) share ownership of the company. We’re on a journey, an ongoing experiment to find happier, more trusted ways of doing business and all of our Partners have a part to play. By joining the Partnership you’ll be joining a different kind of business. One that seeks to make a difference, not just to its Partners, but to the lives of everyone. It’s this shared purpose that drives us. Guides us. And we believe that by working together, in Partnership, we can help create a place with happier people, for a happier business and a happier world. #FindYourHappier #DrivenByPurpose

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,129
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Metro Inc.

11011 boul. Maurice-Duplessis, Montréal, Québec, H1C 1V6, CA
Last Update: 2025-12-17
Between 750 and 799
http://www.corpo.metro.ca

With annual sales of more than $21 billion, METRO Inc. is a food and pharmacy leader in Québec and Ontario, providing employment to more than 97,000 people. Its purpose is to Nourish the health and well-being of our communities. As a retailer, franchisor, distributor, manufacturer, and provider of eCommerce services, the company operates or services a network of 995 food stores under several banners including Metro, Metro Plus, Super C, Food Basics, Adonis and Première Moisson, and some 640 pharmacies primarily under the Jean Coutu, Brunet, Metro Pharmacy and Food Basics Pharmacy banners. For more details, visit corpo.metro.ca

NAICS: 43
NAICS Definition: Retail Trade
Employees: 19,235
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/metro-inc..jpeg
Metro Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
John Lewis & Partners
100%
Compliance Rate
0/4 Standards Verified
Metro Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for John Lewis & Partners in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Metro Inc. in 2025.

Incident History — John Lewis & Partners (X = Date, Y = Severity)

John Lewis & Partners cyber incidents detection timeline including parent company and subsidiaries

Incident History — Metro Inc. (X = Date, Y = Severity)

Metro Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
Incidents

No Incident

https://images.rankiteo.com/companyimages/metro-inc..jpeg
Metro Inc.
Incidents

No Incident

FAQ

John Lewis & Partners company demonstrates a stronger AI Cybersecurity Score compared to Metro Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Metro Inc. company has disclosed a higher number of cyber incidents compared to John Lewis & Partners company.

In the current year, Metro Inc. company and John Lewis & Partners company have not reported any cyber incidents.

Neither Metro Inc. company nor John Lewis & Partners company has reported experiencing a ransomware attack publicly.

Neither Metro Inc. company nor John Lewis & Partners company has reported experiencing a data breach publicly.

Neither Metro Inc. company nor John Lewis & Partners company has reported experiencing targeted cyberattacks publicly.

Neither John Lewis & Partners company nor Metro Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Neither John Lewis & Partners nor Metro Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

John Lewis & Partners company has more subsidiaries worldwide compared to Metro Inc. company.

Metro Inc. company employs more people globally than John Lewis & Partners company, reflecting its scale as a Retail.

Neither John Lewis & Partners nor Metro Inc. holds SOC 2 Type 1 certification.

Neither John Lewis & Partners nor Metro Inc. holds SOC 2 Type 2 certification.

Neither John Lewis & Partners nor Metro Inc. holds ISO 27001 certification.

Neither John Lewis & Partners nor Metro Inc. holds PCI DSS certification.

Neither John Lewis & Partners nor Metro Inc. holds HIPAA certification.

Neither John Lewis & Partners nor Metro Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References