Comparison Overview

loanDepot Wholesale/Correspondent

VS

State Street

loanDepot Wholesale/Correspondent

2600 Michelson Drive, Irvine, CA, 92612, US
Last Update: 2025-02-22 (UTC)
Between 800 and 900
http://www.ldwholesale.com

Strong

loanDepot Wholesale is a third-party origination channel of loanDepot, America's lender. Serving mortgage brokers in 48 states and the District of Columbia, the division delivers an integrated and seamless technology-based lending experience for business partners and customers that is transparent and fast. loanDepot Wholesale offers a competitively priced suite of Conventional, FHA, VA, Jumbo and Renovation loan products. loanDepot LLC, NMLS #174457. Learn more at LDWholesale.com.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 59
Subsidiaries: 1
12-month incidents
0
Known data breaches
2
Attack type number
2

State Street

One Lincoln St, Boston, Massachusetts, 02111, US
Last Update: 2025-05-06 (UTC)

Excellent

Between 900 and 1000
http://www.statestreet.com

At State Street, we partner with institutional investors all over the world to provide comprehensive financial services, including investment management, investment research and trading, and investment servicing. Whether you are an asset manager, asset owner, alternative asset manager, insurance company, pension fund or official institution, you can rely on us to be focused on your challenges. We are committed to doing what it takes to help you perform better — now and in the future.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 42,918
Subsidiaries: 4
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/state-street.jpeg
State Street
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
loanDepot Wholesale/Correspondent
100%
Compliance Rate
0/4 Standards Verified
State Street
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for loanDepot Wholesale/Correspondent in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for State Street in 2025.

Incident History — loanDepot Wholesale/Correspondent (X = Date, Y = Severity)

loanDepot Wholesale/Correspondent cyber incidents detection timeline including parent company and subsidiaries

Incident History — State Street (X = Date, Y = Severity)

State Street cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
Incidents

Date Detected: 1/2024
Type:Breach
Blog: Blog

Date Detected: 01/2024
Type:Cyber Attack
Blog: Blog

Date Detected: 8/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/state-street.jpeg
State Street
Incidents

No Incident

FAQ

State Street company company demonstrates a stronger AI risk posture compared to loanDepot Wholesale/Correspondent company company, reflecting its advanced AI governance and monitoring frameworks.

loanDepot Wholesale/Correspondent company has historically faced a number of disclosed cyber incidents, whereas State Street company has not reported any.

In the current year, State Street company and loanDepot Wholesale/Correspondent company have not reported any cyber incidents.

Neither State Street company nor loanDepot Wholesale/Correspondent company has reported experiencing a ransomware attack publicly.

loanDepot Wholesale/Correspondent company has disclosed at least one data breach, while the other State Street company has not reported such incidents publicly.

loanDepot Wholesale/Correspondent company has reported targeted cyberattacks, while State Street company has not reported such incidents publicly.

Neither loanDepot Wholesale/Correspondent company nor State Street company has reported experiencing or disclosing vulnerabilities publicly.

State Street company has more subsidiaries worldwide compared to loanDepot Wholesale/Correspondent company.

State Street company employs more people globally than loanDepot Wholesale/Correspondent company, reflecting its scale as a Financial Services.

Latest Global CVEs (Not Company-Specific)

Description

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Published
Date
2025-10-20
Updated
Date
2025-10-20
References
Description

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 10.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wp_ajax_import_elementor_template action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss3
Base: 5.0
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
References
Description

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 7.5
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber
References