Comparison Overview

Macmillan Distribution

VS

CMA CGM

Macmillan Distribution

Cromwell Place, Basingstoke, Hants, RG24 8YJ, GB
Last Update: 2025-03-14 (UTC)
View Profile
Between 750 and 799
http://www.macmillandistribution.co.uk/

Warehousing MDL operates over 340sq ft of modern warehousing at its distribution centre based near Swansea. Over the last ten years it has invested extensively in two new hi-bay storage units, a sophisticated conveyor system for forward picking and the latest logistical hardware for inventory and order management. MIDAS (Data Warehouse) MDL offers a sophisticated bespoke and industry leading sales data warehouse. Through the Macmillan Information Delivery and Analysis System (MIDAS) it offers its publishers immediate and unprecedented access to their sales, stock and debtor information. Track & Trace Using only the best carriers, proof of delivery and delivery status updates are accessible on-line to all customers. EDI links with DPD and UPS allow MDL to complete a variety of reporting and service level monitoring over and above that done by the carrier. Books & Journals MDL is able to offer a total fulfilment package for all genres of books and subscription publishing. In partnership with MPS Technologies MDL can provide business process outsourcing to journals and subscription publishers. Order Processing Accredited under the Book Industry Communication supply chain excellence scheme MDL is dedicated to the expansion of e-commerce. As well as a dedicated Customer Service department we work closely with e-commerce partners such as PubEasy, Batch.co.uk and Nielsen Booknet.

NAICS: None
NAICS Definition:
Employees: 74
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

CMA CGM

4, Quai d'arenc, Marseille, Provence-Alpes-Côte d'Azur, FR, 13002
Last Update: 2025-09-20 (UTC)
Between 750 and 799
http://www.cma-cgm.com

The CMA CGM Group is a global player in sea, land, air and logistics solutions, true to its corporate Purpose, "We imagine better ways to serve a world in motion". Present in 177 countries, it employs 160,000 people, of which nearly 6,000 in Marseilles where its head office is located. The world's 3rd largest shipping company, CMA CGM serves more than 420 ports across 5 continents with a fleet of over 650 vessels. In 2024, CMA CGM carried over 23 million TEU (twenty-foot equivalent unit) containers. Its subsidiary CEVA Logistics, one of the world's top five players, operates 1,000 warehouses and handled 15 million shipments in 2024. CMA CGM AIR CARGO, the Group's air freight division, will operate a fleet of 6 cargo aircraft by 2025. CMA Media, France's 3rd largest private media group, includes RMC-BFM and several national and regional press titles (La Tribune Dimanche, La Tribune, La Provence and Corse Matin). Committed to energy transition, the CMA CGM Group is aiming for Net Zero Carbon by 2050. The CMA CGM Foundation provides humanitarian aid in crisis situations, and is committed to education for all and equal opportunities throughout the world. To date, the CMA CGM Foundation has transported 63,000 tons of humanitarian aid to 97 countries and supported over 550 educational projects.

NAICS: 47
NAICS Definition: Transportation and Warehousing
Employees: 29,493
Subsidiaries: 12
12-month incidents
0
Known data breaches
0
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/macmillan-distribution.jpeg
Macmillan Distribution
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/cma-cgm.jpeg
CMA CGM
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Macmillan Distribution
100%
Compliance Rate
0/4 Standards Verified
CMA CGM
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Average (This Year)

No incidents recorded for Macmillan Distribution in 2025.

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Average (This Year)

No incidents recorded for CMA CGM in 2025.

Incident History — Macmillan Distribution (X = Date, Y = Severity)

Macmillan Distribution cyber incidents detection timeline including parent company and subsidiaries

Incident History — CMA CGM (X = Date, Y = Severity)

CMA CGM cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/macmillan-distribution.jpeg
Macmillan Distribution
Incidents

No Incident

https://images.rankiteo.com/companyimages/cma-cgm.jpeg
CMA CGM
Incidents

Date Detected: 9/2021
Type:Ransomware
Attack Vector: ransomware (Ragnar Locker)
Motivation: financial gain, data theft
Blog: Blog

Date Detected: 09/2021
Type:Data Leak
Blog: Blog

Date Detected: 09/2020
Type:Ransomware
Motivation: Financial
Blog: Blog

FAQ

CMA CGM company demonstrates a stronger AI Cybersecurity Score compared to Macmillan Distribution company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

CMA CGM company has historically faced a number of disclosed cyber incidents, whereas Macmillan Distribution company has not reported any.

In the current year, CMA CGM company and Macmillan Distribution company have not reported any cyber incidents.

CMA CGM company has confirmed experiencing a ransomware attack, while Macmillan Distribution company has not reported such incidents publicly.

Neither CMA CGM company nor Macmillan Distribution company has reported experiencing a data breach publicly.

CMA CGM company has reported targeted cyberattacks, while Macmillan Distribution company has not reported such incidents publicly.

Neither Macmillan Distribution company nor CMA CGM company has reported experiencing or disclosing vulnerabilities publicly.

Neither Macmillan Distribution nor CMA CGM holds any compliance certifications.

Neither company holds any compliance certifications.

CMA CGM company has more subsidiaries worldwide compared to Macmillan Distribution company.

CMA CGM company employs more people globally than Macmillan Distribution company, reflecting its scale as a Transportation, Logistics, Supply Chain and Storage.

Neither Macmillan Distribution nor CMA CGM holds SOC 2 Type 1 certification.

Neither Macmillan Distribution nor CMA CGM holds SOC 2 Type 2 certification.

Neither Macmillan Distribution nor CMA CGM holds ISO 27001 certification.

Neither Macmillan Distribution nor CMA CGM holds PCI DSS certification.

Neither Macmillan Distribution nor CMA CGM holds HIPAA certification.

Neither Macmillan Distribution nor CMA CGM holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Published
Date
2025-10-23
Updated
Date
2025-10-23
Risk Information
cvss3
Base: 6.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
Description

The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.

Published
Date
2025-10-23
Updated
Date
2025-10-23
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

Published
Date
2025-10-23
Updated
Date
2025-10-23
Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

Published
Date
2025-10-23
Updated
Date
2025-10-23
Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

Published
Date
2025-10-23
Updated
Date
2025-10-23
Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
cvss4
Base: 8.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References