Comparison Overview

Liz's Pet Shop

VS

Marks and Spencer

Liz's Pet Shop

2403 W. Chicago Ave, Chicago, IL 60622, US
Last Update: 2025-03-16 (UTC)
Between 800 and 900

Strong

Liz's Pet Shop has been bringing super premium pet foods and supplies to the Chicago area for over 17 years. Expertise has helped loving pet parents select the correct products for their pet companion. Liz's Pet Shop is located near West Town, off the intersection of Chicago and Western Ave.

NAICS: 452
NAICS Definition:
Employees: 6
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Marks and Spencer

Waterside House, 35 North Wharf Rd, London, London, GB, W2 1NW
Last Update: 2025-08-27 (UTC)

Strong

At M&S, we're dedicated to being the most trusted retailer, prioritising quality and delivering value. Every day, we bring the magic of M&S to our customers, whenever, wherever and however they want to shop with us. For over a century, we've set the standard, doing the right thing and embracing innovation. Today, with over 65,000 colleagues serving 32 million customers globally, we're putting quality products at the heart of everything we do. Tomorrow holds boundless opportunities with us. We're pioneering digital innovation and shaping the future of retail where our values drive every action. We stay close to customers and colleagues, always curious and connected. Our decisions are bold, our actions ambitious. Transparency is paramount, with straightforward, honest communication. We're constantly innovating, always striving for the best. Our focus is on aiming higher and winning together, combined with wise financial decisions to secure our future. Join us at M&S to shape the future of retail.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 39,274
Subsidiaries: 0
12-month incidents
24
Known data breaches
1
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/liz's-pet-shop.jpeg
Liz's Pet Shop
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/marks-and-spencer.jpeg
Marks and Spencer
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
Compliance Summary
Liz's Pet Shop
100%
Compliance Rate
0/4 Standards Verified
Marks and Spencer
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Liz's Pet Shop in 2025.

Incidents vs Retail Industry Average (This Year)

Marks and Spencer has 5753.66% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History โ€” Liz's Pet Shop (X = Date, Y = Severity)

Liz's Pet Shop cyber incidents detection timeline including parent company and subsidiaries

Incident History โ€” Marks and Spencer (X = Date, Y = Severity)

Marks and Spencer cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/liz's-pet-shop.jpeg
Liz's Pet Shop
Incidents

No Incident

https://images.rankiteo.com/companyimages/marks-and-spencer.jpeg
Marks and Spencer
Incidents

Date Detected: 9/2025
Type:Ransomware
Motivation: financial gain (ransom demand), disruption of operations
Blog: Blog

Date Detected: 9/2025
Type:Ransomware
Attack Vector: Social Engineering, Reconnaissance, Vulnerability Exploitation, AI-Powered Tools
Motivation: Financial Gain, Disruption, Data Theft/Extortion
Blog: Blog

Date Detected: 8/2025
Type:Cyber Attack
Attack Vector: AI-driven attacks, Cybercrime-as-a-Service (CaaS), Ransomware, Phishing, Supply Chain Compromise
Motivation: Financial gain, Disruption, Data theft
Blog: Blog

FAQ

Both Liz's Pet Shop company and Marks and Spencer company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Marks and Spencer company has historically faced a number of disclosed cyber incidents, whereas Liz's Pet Shop company has not reported any.

In the current year, Marks and Spencer company has reported more cyber incidents than Liz's Pet Shop company.

Marks and Spencer company has confirmed experiencing a ransomware attack, while Liz's Pet Shop company has not reported such incidents publicly.

Marks and Spencer company has disclosed at least one data breach, while Liz's Pet Shop company has not reported such incidents publicly.

Marks and Spencer company has reported targeted cyberattacks, while Liz's Pet Shop company has not reported such incidents publicly.

Neither Liz's Pet Shop company nor Marks and Spencer company has reported experiencing or disclosing vulnerabilities publicly.

Neither Liz's Pet Shop company nor Marks and Spencer company has publicly disclosed detailed information about the number of their subsidiaries.

Marks and Spencer company employs more people globally than Liz's Pet Shop company, reflecting its scale as a Retail.

Latest Global CVEs (Not Company-Specific)

Description

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file system including the Traccar configuration file. Versions 5.8 - 6.0 are only vulnerable if <entry key='web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the web override is enabled by default. The vulnerable code is removed in version 6.9.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (OOM) killer and causing a denial of service. The CommandParser implementation enforces size limits on its dynamic buffer in most parsing states, but several state handlers omit these validation checks. This issue is fixed in version 0.13.4. A workaround for this issue is to implement rate limiting and connection monitoring at the network level, however this does not provide complete protection.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X