Comparison Overview

loanDepot Wholesale/Correspondent

VS

The Max Group

loanDepot Wholesale/Correspondent

2600 Michelson Drive, Irvine, CA, 92612, US
Last Update: 2025-02-22 (UTC)
Between 800 and 900
http://www.ldwholesale.com

Strong

loanDepot Wholesale is a third-party origination channel of loanDepot, America's lender. Serving mortgage brokers in 48 states and the District of Columbia, the division delivers an integrated and seamless technology-based lending experience for business partners and customers that is transparent and fast. loanDepot Wholesale offers a competitively priced suite of Conventional, FHA, VA, Jumbo and Renovation loan products. loanDepot LLC, NMLS #174457. Learn more at LDWholesale.com.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 59
Subsidiaries: 1
12-month incidents
0
Known data breaches
2
Attack type number
2

The Max Group

Max House 1, Dr. Jha Marg, Okhla Phase III New Delhi, Delhi 110020, IN
Last Update: 2025-05-05 (UTC)

Excellent

Between 900 and 1000
https://maxgroup.in

Max Group: The Max Group is a leading Indian multi-business conglomerate with interests in the Life Insurance, Healthcare, Real Estate and Senior Living industries. In FY2019, the Group recorded consolidated revenue of Rs. 24,134 Cr. It currently has a total customer base of 9 million, around 340 offices spread across India, an agency strength of ~46,000 and employee strength of more than 27,000. The Max Group comprises three holding companies, namely Max Financial Services, Max India and Max Ventures & Industries. The Group’s investor base includes marquee global financial institutions such as New York Life, KKR, IFC Washington, Vanguard, Ward Ferry, Briarwood Capital, Ellipsis Partners, Nomura, Aberdeen, First State Investments, Indgrowth Capital Fund, India Insight Value Fund, First Voyager, Eastspring, Target Asset Management, Baron and Doric Capital. The Max Group is led by its Founder and Chairman Mr. Analjit Singh. About Max India: Max India, a part of the leading Indian conglomerate Max Group, has a presence in the senior living and healthcare industry. It is the holding company of Antara Senior Living and an equal joint venture partner with a 49.7% in Max Healthcare along with Radiant Life Care Private Limited (Radiant). Max India’s businesses have well-entrenched positions in their respective categories and are recognized for their outstanding service standards. Max India is listed on both the Bombay Stock Exchange as well as the National Stock Exchange. For more details, visit www.maxindia.com.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/defaultcompany.jpeg
The Max Group
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
loanDepot Wholesale/Correspondent
100%
Compliance Rate
0/4 Standards Verified
The Max Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for loanDepot Wholesale/Correspondent in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for The Max Group in 2025.

Incident History — loanDepot Wholesale/Correspondent (X = Date, Y = Severity)

loanDepot Wholesale/Correspondent cyber incidents detection timeline including parent company and subsidiaries

Incident History — The Max Group (X = Date, Y = Severity)

The Max Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ldwholesale.jpeg
loanDepot Wholesale/Correspondent
Incidents

Date Detected: 1/2024
Type:Breach
Blog: Blog

Date Detected: 01/2024
Type:Cyber Attack
Blog: Blog

Date Detected: 8/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/defaultcompany.jpeg
The Max Group
Incidents

No Incident

FAQ

The Max Group company company demonstrates a stronger AI risk posture compared to loanDepot Wholesale/Correspondent company company, reflecting its advanced AI governance and monitoring frameworks.

loanDepot Wholesale/Correspondent company has historically faced a number of disclosed cyber incidents, whereas The Max Group company has not reported any.

In the current year, The Max Group company and loanDepot Wholesale/Correspondent company have not reported any cyber incidents.

Neither The Max Group company nor loanDepot Wholesale/Correspondent company has reported experiencing a ransomware attack publicly.

loanDepot Wholesale/Correspondent company has disclosed at least one data breach, while the other The Max Group company has not reported such incidents publicly.

loanDepot Wholesale/Correspondent company has reported targeted cyberattacks, while The Max Group company has not reported such incidents publicly.

Neither loanDepot Wholesale/Correspondent company nor The Max Group company has reported experiencing or disclosing vulnerabilities publicly.

loanDepot Wholesale/Correspondent company has more subsidiaries worldwide compared to The Max Group company.

loanDepot Wholesale/Correspondent company employs more people globally than The Max Group company, reflecting its scale as a Financial Services.

Latest Global CVEs (Not Company-Specific)

Description

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Published
Date
2025-10-20
Updated
Date
2025-10-20
References
Description

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 10.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wp_ajax_import_elementor_template action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss3
Base: 5.0
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
References
Description

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.

Published
Date
2025-10-20
Updated
Date
2025-10-20
Risk Information
cvss4
Base: 7.5
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber
References