Comparison Overview

John Lewis & Partners

VS

Mr Price Group

John Lewis & Partners

171 Victoria Street, London, England, undefined, GB
Last Update: 2025-12-17
View Profile
Between 750 and 799
http://www.jlpjobs.com

Since 1864 we've been delighting customers with our quality products and renowned customer service. We put happiness at the heart of everything we do. We our one brand under the John Lewis Partnership umbrella. A unique way of doing business where all of our Partners (employees) share ownership of the company. We’re on a journey, an ongoing experiment to find happier, more trusted ways of doing business and all of our Partners have a part to play. By joining the Partnership you’ll be joining a different kind of business. One that seeks to make a difference, not just to its Partners, but to the lives of everyone. It’s this shared purpose that drives us. Guides us. And we believe that by working together, in Partnership, we can help create a place with happier people, for a happier business and a happier world. #FindYourHappier #DrivenByPurpose

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,129
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Mr Price Group

65 NMR Avenue, Durban, KwaZulu Natal, 4001, ZA
Last Update: 2025-12-10
Between 750 and 799
http://www.mrpricegroup.com/

Mr Price Group Limited is an omni-channel, fashion value retailer. The Group retails Apparel, Homeware and Sportsware and is one of the fastest growing retailers in South Africa. Our History: 1885 - The first John Orrs store opens 1934 - The first Hub store opens 1952 - John Orrs is listed on the JSE 1967 - Acquisition of two Miladys stores 1986 - Laurie Chiappini and Stewart Cohen, together with BOE, acquire a major shareholding in John Orr Holdings 1987 - The first Mr Price store opens 1991 - Laurie Chiappini and Stewart Cohen acquire control of the Group from BOE 1993 - Launch of the Mr Price Group Share Partnership Initiative 1996 - Acquisition of Galaxy & Co. and Sheet Street 1997 - Alastair McArthur is appointed as CEO 1998 - Mr Price Home launched 2000 - Mr Price opens stores in Botswana and Namibia 2001 - Specialty Stores becomes MR Price Group 2005 - Over 100 million units are sold across the group 2006 - Sale of the Hub and Galaxy divisions 2007 - Launch of Mr Price Sport stores and Mr Price Franchising 2008 - Miladys wins the Orange Index award for excellence in customer service 2008 - Mr Price Apparel is voted the most loved and most frequented retail apparel brand for the first time 2008 - This year Mr Price Home is voted the most loved and most frequented homeware retailer 2011 - Retail sales exceed R10 billion and profit attributable to shareholders exceeds R1 billion for the first time 2011 - The group celebrates the 25th anniversary of change in control, recording a CAGR share of 25.3% and headline earnings per share of 23.5% over this period 2012 - First Corporate owned Mr Price store opens in Lagos, Nigeria 2013 - Mr Price launches its online store

NAICS: 43
NAICS Definition: Retail Trade
Employees: 16,924
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/mr-price-group.jpeg
Mr Price Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
John Lewis & Partners
100%
Compliance Rate
0/4 Standards Verified
Mr Price Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for John Lewis & Partners in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Mr Price Group in 2025.

Incident History — John Lewis & Partners (X = Date, Y = Severity)

John Lewis & Partners cyber incidents detection timeline including parent company and subsidiaries

Incident History — Mr Price Group (X = Date, Y = Severity)

Mr Price Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/johnlewisandpartners.jpeg
John Lewis & Partners
Incidents

No Incident

https://images.rankiteo.com/companyimages/mr-price-group.jpeg
Mr Price Group
Incidents

No Incident

FAQ

John Lewis & Partners company demonstrates a stronger AI Cybersecurity Score compared to Mr Price Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Mr Price Group company has disclosed a higher number of cyber incidents compared to John Lewis & Partners company.

In the current year, Mr Price Group company and John Lewis & Partners company have not reported any cyber incidents.

Neither Mr Price Group company nor John Lewis & Partners company has reported experiencing a ransomware attack publicly.

Neither Mr Price Group company nor John Lewis & Partners company has reported experiencing a data breach publicly.

Neither Mr Price Group company nor John Lewis & Partners company has reported experiencing targeted cyberattacks publicly.

Neither John Lewis & Partners company nor Mr Price Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither John Lewis & Partners nor Mr Price Group holds any compliance certifications.

Neither company holds any compliance certifications.

John Lewis & Partners company has more subsidiaries worldwide compared to Mr Price Group company.

Mr Price Group company employs more people globally than John Lewis & Partners company, reflecting its scale as a Retail.

Neither John Lewis & Partners nor Mr Price Group holds SOC 2 Type 1 certification.

Neither John Lewis & Partners nor Mr Price Group holds SOC 2 Type 2 certification.

Neither John Lewis & Partners nor Mr Price Group holds ISO 27001 certification.

Neither John Lewis & Partners nor Mr Price Group holds PCI DSS certification.

Neither John Lewis & Partners nor Mr Price Group holds HIPAA certification.

Neither John Lewis & Partners nor Mr Price Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References