Comparison Overview

MANGO

VS

HUGO BOSS

MANGO

Mercaders 9-11, Poligono Industrial Riera de Caldes, Palau Solità i Plegamans, Barcelona, ES, 08184
Last Update: 2025-12-17
Between 700 and 749

Mango, one of the leading international fashion groups, is a global company with design and creativity at the heart of its business model and a strategy based on constant innovation, the pursuit of sustainability and a complete ecosystem of channels and partners. With its roots in Barcelona, one of the cradles of the textile industry, since it was founded in 1984, Mango has spent four decades looking to the future and inspiring the world with its passion for fashion and lifestyle. With the customer always its priority, the company bases its model on a unique fashion proposal focused on translating key fashion trends into its own language. At the Campus Mango, located at the company headquarters (Palau-solità i Plegamans, Barcelona), the company works on all areas related to creativity and every year creates over 18,000 garments and accessories. Present in more than 120 markets and with a network of close to 2,850 points of sales, Mango adapts to each country with a complete ecosystem of channels and international partners. The company closed 2024 with a turnover of 3.3 billion euros, with 32% of turnover coming from its online channel and with a workforce of more than 16,400 employees in all five continents. More information at www.mangofashiongroup.com

NAICS: 448
NAICS Definition: Clothing and Clothing Accessories Stores
Employees: 11,444
Subsidiaries: 0
12-month incidents
1
Known data breaches
1
Attack type number
1

HUGO BOSS

Holy-Allee 3, Metzingen, Baden-Württemberg, DE, 72555
Last Update: 2025-12-15

At HUGO BOSS, we firmly believe that the passion and dedication of our employees is the essence for the successful execution of our “CLAIM 5 TOUCHDOWN” growth strategy. A strong commitment to empowering people and teams is therefore firmly anchored in “CLAIM 5 TOUCHDOWN”. In this context, our HUGO BOSS values — entrepreneurial spirit, personal ownership, team mentality, simplicity & quality, and youthful spirit — play a key role. They form the guiding principle for day-to-day cooperation and are intended to foster a spirit of mutual trust. The aim is to create an environment that enables all employees to develop their individual talents and thus directly contribute to the success of “CLAIM 5 TOUCHDOWN”. On top of that, HUGO BOSS intends to continue positioning itself as one of the most attractive employers in the fashion industry. This, in turn, should enable us to attract the best talents in the sector.

NAICS: 448
NAICS Definition: Clothing and Clothing Accessories Stores
Employees: 16,083
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/mango.jpeg
MANGO
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/hugo-boss.jpeg
HUGO BOSS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
MANGO
100%
Compliance Rate
0/4 Standards Verified
HUGO BOSS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Apparel and Fashion Industry Average (This Year)

MANGO has 16.28% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Retail Apparel and Fashion Industry Average (This Year)

No incidents recorded for HUGO BOSS in 2025.

Incident History — MANGO (X = Date, Y = Severity)

MANGO cyber incidents detection timeline including parent company and subsidiaries

Incident History — HUGO BOSS (X = Date, Y = Severity)

HUGO BOSS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/mango.jpeg
MANGO
Incidents

Date Detected: 10/2025
Type:Breach
Attack Vector: third-party vendor compromise, supply chain attack
Motivation: data theft, extortion, financial gain (potential ransom)
Blog: Blog
https://images.rankiteo.com/companyimages/hugo-boss.jpeg
HUGO BOSS
Incidents

No Incident

FAQ

HUGO BOSS company demonstrates a stronger AI Cybersecurity Score compared to MANGO company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

MANGO company has historically faced a number of disclosed cyber incidents, whereas HUGO BOSS company has not reported any.

In the current year, MANGO company has reported more cyber incidents than HUGO BOSS company.

Neither HUGO BOSS company nor MANGO company has reported experiencing a ransomware attack publicly.

MANGO company has disclosed at least one data breach, while the other HUGO BOSS company has not reported such incidents publicly.

Neither HUGO BOSS company nor MANGO company has reported experiencing targeted cyberattacks publicly.

Neither MANGO company nor HUGO BOSS company has reported experiencing or disclosing vulnerabilities publicly.

Neither MANGO nor HUGO BOSS holds any compliance certifications.

Neither company holds any compliance certifications.

Neither MANGO company nor HUGO BOSS company has publicly disclosed detailed information about the number of their subsidiaries.

HUGO BOSS company employs more people globally than MANGO company, reflecting its scale as a Retail Apparel and Fashion.

Neither MANGO nor HUGO BOSS holds SOC 2 Type 1 certification.

Neither MANGO nor HUGO BOSS holds SOC 2 Type 2 certification.

Neither MANGO nor HUGO BOSS holds ISO 27001 certification.

Neither MANGO nor HUGO BOSS holds PCI DSS certification.

Neither MANGO nor HUGO BOSS holds HIPAA certification.

Neither MANGO nor HUGO BOSS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X