Comparison Overview

loanDepot Wholesale/Correspondent

VS

Barclays Investment Bank

loanDepot Wholesale/Correspondent

2600 Michelson Drive, Irvine, CA, 92612, US
Last Update: 2025-02-22 (UTC)
Between 800 and 900
http://www.ldwholesale.com

Strong

loanDepot Wholesale is a third-party origination channel of loanDepot, America's lender. Serving mortgage brokers in 48 states and the District of Columbia, the division delivers an integrated and seamless technology-based lending experience for business partners and customers that is transparent and fast. loanDepot Wholesale offers a competitively priced suite of Conventional, FHA, VA, Jumbo and Renovation loan products. loanDepot LLC, NMLS #174457. Learn more at LDWholesale.com.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 59
Subsidiaries: 1
12-month incidents
0
Known data breaches
2
Attack type number
2

Barclays Investment Bank

745 Seventh Avenue, New York, NY, 10019, US
Last Update: 2025-05-04 (UTC)

Strong

Between 800 and 900
https://www.barclays.com/ib

Barclays Investment Bank deploys financial solutions to help our clients with their funding, financing, strategic and risk management needs across sectors, markets and economies. The Investment Bank is comprised of the Investment Banking, International Corporate Banking, Global Markets and Research businesses, aiding money managers, financial institutions, governments, supranational organisations and corporate clients around the globe. We offer a full spectrum of strategic advisory, financing and risk management solutions to help drive innovation and growth. For over 330 years, our commitment to shared success has been at the heart of what we do, because we are all at our best when we all progress. For further information about Barclays Investment Bank, please visit our website www.barclays.com/ib

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 21,686
Subsidiaries: 12
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/barclays-investment-bank.jpeg
Barclays Investment Bank
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
loanDepot Wholesale/Correspondent
100%
Compliance Rate
0/4 Standards Verified
Barclays Investment Bank
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for loanDepot Wholesale/Correspondent in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Barclays Investment Bank in 2025.

Incident History — loanDepot Wholesale/Correspondent (X = Date, Y = Severity)

loanDepot Wholesale/Correspondent cyber incidents detection timeline including parent company and subsidiaries

Incident History — Barclays Investment Bank (X = Date, Y = Severity)

Barclays Investment Bank cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
Incidents

Date Detected: 1/2024
Type:Breach
Blog: Blog

Date Detected: 01/2024
Type:Cyber Attack
Blog: Blog

Date Detected: 8/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/barclays-investment-bank.jpeg
Barclays Investment Bank
Incidents

No Incident

FAQ

Both loanDepot Wholesale/Correspondent company and Barclays Investment Bank company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

loanDepot Wholesale/Correspondent company has historically faced a number of disclosed cyber incidents, whereas Barclays Investment Bank company has not reported any.

In the current year, Barclays Investment Bank company and loanDepot Wholesale/Correspondent company have not reported any cyber incidents.

Neither Barclays Investment Bank company nor loanDepot Wholesale/Correspondent company has reported experiencing a ransomware attack publicly.

loanDepot Wholesale/Correspondent company has disclosed at least one data breach, while the other Barclays Investment Bank company has not reported such incidents publicly.

loanDepot Wholesale/Correspondent company has reported targeted cyberattacks, while Barclays Investment Bank company has not reported such incidents publicly.

Neither loanDepot Wholesale/Correspondent company nor Barclays Investment Bank company has reported experiencing or disclosing vulnerabilities publicly.

Barclays Investment Bank company has more subsidiaries worldwide compared to loanDepot Wholesale/Correspondent company.

Barclays Investment Bank company employs more people globally than loanDepot Wholesale/Correspondent company, reflecting its scale as a Financial Services.

Latest Global CVEs (Not Company-Specific)

Description

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Published
Date
2025-10-20
Updated
Date
2025-10-20
References
Description

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 10.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wp_ajax_import_elementor_template action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss3
Base: 5.0
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
References
Description

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 7.5
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber
References