What is the official website of Lazada ?

The official website of Lazada is https://group.lazada.com/.

What is Lazada's cybersecurity risk score?

Lazada has an AI-generated cybersecurity risk score of 801 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Lazada experienced?

According to Rankiteo, Lazada currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Lazada been affected by any supply chain cyber incidents ?

According to Rankiteo, Lazada has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Lazada have SOC 2 Type 1 certification ?

According to Rankiteo, Lazada is not certified under SOC 2 Type 1.

Does Lazada have SOC 2 Type 2 certification ?

According to Rankiteo, Lazada does not hold a SOC 2 Type 2 certification.

Does Lazada comply with GDPR ?

According to Rankiteo, Lazada is not listed as GDPR compliant.

Does Lazada have PCI DSS certification ?

According to Rankiteo, Lazada does not currently maintain PCI DSS compliance.

Does Lazada comply with HIPAA ?

According to Rankiteo, Lazada is not compliant with HIPAA regulations.

Does Lazada have ISO 27001 certification ?

According to Rankiteo,Lazada is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Lazada operate in ?

Lazada operates primarily in the Software Development industry.

How many employees does Lazada have ?

Lazada employs approximately 21,644 people worldwide.

Does Lazada own any subsidiaries ?

Lazada presently has no subsidiaries across any sectors.

How many LinkedIn followers does Lazada have ?

Lazada's official LinkedIn profile has approximately 1,298,175 followers.

What is the NAICS classification code for Lazada ?

Lazada is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Lazada have a Crunchbase profile ?

No, Lazada does not have a profile on Crunchbase.

Does Lazada have a LinkedIn profile ?

Yes, Lazada maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/lazada.

How many cybersecurity incidents has Lazada experienced ?

As of October 16, 2026, Rankiteo reports that Lazada has not experienced any cybersecurity incidents.

How many peer or competitor companies does Lazada have ?

Lazada has an estimated 31,125 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Lazada

Boost Score +25 with badge (5 left)

801

/1000

Good

826

/1000

Good

Lazada Vendor Cyber Rating & Cyber Score

lazada.com

Add Your Compliance Badge

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

Lazada

Lazada CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Lazada Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Lazada

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Lazada in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Lazada in 2026.

Incident Types Lazada vs Software Development Industry Avg (This Year)

No incidents recorded for Lazada in 2026.

Incident History - Lazada (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Lazada Subsidiaries

Parent Company

Lazada

Software Development

Website: https://group.lazada.com/

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

Lazada Similar Companies

Dassault Systèmes

3ds.com

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

IGT

IGT.com

IGT is a leading global provider of gaming, digital and financial technology solutions, formed through the combination of International Game Technology PLC’s Gaming & Digital Business and Everi Holdings Inc. IGT’s offering spans gaming machines, game content and systems, iGaming, sports betting, cash access, loyalty and player engagement solutions, enabling it to deliver integrated, customer-centric experiences across land-based and digital environments. Organized into Gaming, Digital and FinTech business units, IGT drives innovation, efficiency and value for casino, digital and hospitality operators worldwide. The company is headquartered in Las Vegas.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Siemens Digital Industries Software

siemens.com

We help organizations of all sizes digitally transform using software, hardware and services from the Siemens Xcelerator business platform. Our software and the comprehensive digital twin enable companies to optimize their design, engineering and manufacturing processes to turn today's ideas into the sustainable products of the future. From chips to entire systems, from product to process, across all industries. We help transform the everyday as part of @Siemens, To learn more, visit http://sw.siemens.com.

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

Sage

sage.com

At Sage, we knock down barriers with information, insights, and tools to help your business flow. We provide businesses with software and services that are simple and easy to use, as we work with you to give you that feeling of confidence. Customers trust our Payroll, HR, and Finance software to make business flow with ease. From our local network of experts to our ever-growing partnerships, we are on hand to give you all the insights you need to thrive. 💚

Avaya

cb tinyurl.com

At Avaya, we give our customers the freedom to take their business in the directions that benefit them most. We provide the paths for both customers and their employees where every moment big and small can drive in the moment, memorable experiences. The journey is theirs at the pace that makes sense for them with the innovation without disruption they need now and the solutions they can invest in the future.

Loading…

NEWS

Lazada CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 11, 2025 08:00 AM

Smartphone gift picks for every budget

The holiday season is fast approaching, and Filipinos are already planning gifts that express love, gratitude, and appreciation.

Read Article

November 12, 2025 08:00 AM

Great Deals On 11.11 Sales, Beware They Could Be Fraud

As online shoppers worldwide flock to major 11.11 sale campaigns, cybersecurity firm Kaspersky has issued a warning about a rising wave of...

Read Article

July 22, 2025 07:00 AM

Adobe expands copyright and cybersecurity cooperation in Vietnam

On July 21, a working session was held at the Ministry of Culture, Sports and Tourism headquarters between Tran Hoang, Director of the...

Read Article

February 25, 2025 08:00 AM

Singapore introduces guidelines to minimise disruptions to cloud services and data centres

The guidelines for data centres will provide a framework for operators to instill systems to ensure business continuity and minimise service...

Read Article

January 27, 2025 08:00 AM

Northstar went dental🦷, Google fined 💸, eFishery fraud unfolds🤯, secondary exits trending?

Dear readers,. It's a long Lunar New Year break here in Indonesia, but we are still excited to share the latest updates from Indonesia's...

Read Article

January 20, 2025 08:00 AM

SG Cyber Safe Partnership - Advocates

Advocate partner organisations would typically have a greater and deeper level of collaborations with CSA - such as working with CSA on...

Read Article

August 27, 2024 07:00 AM

LAZADA GROUP RELEASES ANNUAL ENVIRONMENTAL, SOCIAL AND GOVERNANCE (ESG) IMPACT REPORT FOR FINANCIAL YEAR 2024

PRNewswire/ -- Lazada, a leading eCommerce platform in Southeast Asia, today released its annual Environment, Social, and Governance (ESG)...

Read Article

June 27, 2024 07:00 AM

Lazada denies data breach

Online shopping platform Lazada has denied claims that records of about 18 million customers have been breached.

Read Article

June 27, 2024 07:00 AM

Lazada, GCash say no compromise of customer information

Lazada refuted claims that 18 million customer records were compromised, while Gcash assured that no know-your-customer (KYC) data had been breached.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-111369

SUMMARY

ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change titles and stored HTML content or delete lessons in their course and in other courses and organizations.

Published

Date2026-10-15

Updated

Date2026-10-15

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-111368

SUMMARY

ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. Attackers can supply their own course id with another course's submission UUID to PUT or DELETE handlers to overwrite answers, grades, feedback, and grading status or delete submissions.

Published

Date2026-10-15

Updated

Date2026-10-15

RISK INFORMATION (Score: 6.4)

cvss3

Base Score: 6.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

1.6

REFERENCES

CVE-2026-111367

SUMMARY

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.

Published

Date2026-10-15

Updated

Date2026-10-15

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-111366

SUMMARY

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records, reset passwords and roles, or delete accounts.

Published

Date2026-10-15

Updated

Date2026-10-15

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-111365

SUMMARY

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with another admin's role id to rewrite menu and department grants, changing other users' effective access.

Published

Date2026-10-15

Updated

Date2026-10-15

RISK INFORMATION (Score: 6)

cvss3

Base Score: 6.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L

cvss4

Base Score: 7.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

1.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Lazada Vendor Cyber Rating & Cyber Score

Lazada A.I CyberSecurity Scoring

Lazada CyberSecurity News & History

Lazada Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Lazada

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Lazada vs Software Development Industry Avg (This Year)

Incident History - Lazada (X = Date, Y = Severity)

Lazada Subsidiaries

Parent Company

Lazada

Lazada Similar Companies

Dassault Systèmes

IGT

Groupon

PayPal

Siemens Digital Industries Software

Pitney Bowes

Baidu, Inc.

Sage

Avaya

Lazada CyberSecurity News

Smartphone gift picks for every budget

Great Deals On 11.11 Sales, Beware They Could Be Fraud

Adobe expands copyright and cybersecurity cooperation in Vietnam

Singapore introduces guidelines to minimise disruptions to cloud services and data centres

Northstar went dental🦷, Google fined 💸, eFishery fraud unfolds🤯, secondary exits trending?

SG Cyber Safe Partnership - Advocates

LAZADA GROUP RELEASES ANNUAL ENVIRONMENTAL, SOCIAL AND GOVERNANCE (ESG) IMPACT REPORT FOR FINANCIAL YEAR 2024

Lazada denies data breach

Lazada, GCash say no compromise of customer information

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Lazada CyberSecurity News & History

Lazada Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Lazada

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Lazada vs Software Development Industry Avg (This Year)

Incident History - Lazada (X = Date, Y = Severity)

Lazada Subsidiaries

Parent Company

Lazada

Lazada Similar Companies

Dassault Systèmes

IGT

Groupon

PayPal

Siemens Digital Industries Software

Pitney Bowes

Baidu, Inc.

Sage

Avaya

Lazada CyberSecurity News

Smartphone gift picks for every budget

Great Deals On 11.11 Sales, Beware They Could Be Fraud

Adobe expands copyright and cybersecurity cooperation in Vietnam

Singapore introduces guidelines to minimise disruptions to cloud services and data centres

Northstar went dental🦷, Google fined 💸, eFishery fraud unfolds🤯, secondary exits trending?

SG Cyber Safe Partnership - Advocates

LAZADA GROUP RELEASES ANNUAL ENVIRONMENTAL, SOCIAL AND GOVERNANCE (ESG) IMPACT REPORT FOR FINANCIAL YEAR 2024

Lazada denies data breach

Lazada, GCash say no compromise of customer information

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?