Comparison Overview

Mercedes-Benz Group AG

VS

BMW Group

Mercedes-Benz Group AG

Stuttgart, DE
Last Update: 2025-12-22
View Profile
Between 800 and 849
http://www.mercedes-benz.com/

Learn more about Mercedes-Benz, its products, innovations and our world! Data privacy: mb4.me/provider Imprint: Mercedes-Benz AG Mercedesstraße 120 D-70372 Stuttgart Deutschland Tel.: +49 7 11 17-0 E-Mail: [email protected] Vertreten durch den Vorstand: Ola Källenius (Vorsitzender), Jörg Burzer, Renata Jungo Brüngger, Sabine Kohleisen, Harald Wilhelm, Markus Schäfer, Britta Seeger Vorsitzender des Aufsichtsrats: Bernd Pischetsrieder Handelsregister beim Amtsgericht Stuttgart, Nr. HRB 762873 Umsatzsteueridentifikationsnummer: DE321281763

NAICS: 3361
NAICS Definition: Motor Vehicle Manufacturing
Employees: 2,032
Subsidiaries: 27
12-month incidents
1
Known data breaches
0
Attack type number
2
View Profile

BMW Group

Petuelring 130, Munich, DE, 80788
Last Update: 2025-12-17
Between 700 and 749
https://www.bmwgroup.com/en/general/imprint.html

With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading pre-mium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a global sales network in more than 140 countries. In 2024, the BMW Group sold over 2.45 million passenger vehicles and more than 210,000 motorcycles worldwide. The profit before tax in the financial year 2024 was € 11.0 billion on revenues amounting to € 142.4 billion. As of 31 December 2024, the BMW Group had a workforce of 159,104 employees. The economic success of the BMW Group has always been based on long-term thinking and responsible action. Sustainability is a key element of the BMW Group’s corporate strategy and covers all products from the supply chain and production to the end of their useful life.

NAICS: 3361
NAICS Definition: Motor Vehicle Manufacturing
Employees: 48,747
Subsidiaries: 75
12-month incidents
1
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/mercedes-benz-group-ag.jpeg
Mercedes-Benz Group AG
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bmw-group.jpeg
BMW Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Mercedes-Benz Group AG
100%
Compliance Rate
0/4 Standards Verified
BMW Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Motor Vehicle Manufacturing Industry Average (This Year)

Mercedes-Benz Group AG has 44.93% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Motor Vehicle Manufacturing Industry Average (This Year)

BMW Group has 44.93% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Mercedes-Benz Group AG (X = Date, Y = Severity)

Mercedes-Benz Group AG cyber incidents detection timeline including parent company and subsidiaries

Incident History — BMW Group (X = Date, Y = Severity)

BMW Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/mercedes-benz-group-ag.jpeg
Mercedes-Benz Group AG
Incidents

Date Detected: 12/2025
Type:Vulnerability
Blog: Blog

Date Detected: 10/2019
Type:Data Leak
Attack Vector: Application Vulnerability
Blog: Blog
https://images.rankiteo.com/companyimages/bmw-group.jpeg
BMW Group
Incidents

Date Detected: 5/2025
Type:Ransomware
Motivation: financial extortion, cybercrime
Blog: Blog

Date Detected: 03/2023
Type:Breach
Attack Vector: Misconfiguration
Motivation: Reconnaissance
Blog: Blog

FAQ

Mercedes-Benz Group AG company demonstrates a stronger AI Cybersecurity Score compared to BMW Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Mercedes-Benz Group AG and BMW Group have experienced a similar number of publicly disclosed cyber incidents.

In the current year, BMW Group and Mercedes-Benz Group AG have reported a similar number of cyber incidents.

BMW Group company has confirmed experiencing a ransomware attack, while Mercedes-Benz Group AG company has not reported such incidents publicly.

BMW Group company has disclosed at least one data breach, while Mercedes-Benz Group AG company has not reported such incidents publicly.

Neither BMW Group company nor Mercedes-Benz Group AG company has reported experiencing targeted cyberattacks publicly.

Mercedes-Benz Group AG company has disclosed at least one vulnerability, while BMW Group company has not reported such incidents publicly.

Neither Mercedes-Benz Group AG nor BMW Group holds any compliance certifications.

Neither company holds any compliance certifications.

BMW Group company has more subsidiaries worldwide compared to Mercedes-Benz Group AG company.

BMW Group company employs more people globally than Mercedes-Benz Group AG company, reflecting its scale as a Motor Vehicle Manufacturing.

Neither Mercedes-Benz Group AG nor BMW Group holds SOC 2 Type 1 certification.

Neither Mercedes-Benz Group AG nor BMW Group holds SOC 2 Type 2 certification.

Neither Mercedes-Benz Group AG nor BMW Group holds ISO 27001 certification.

Neither Mercedes-Benz Group AG nor BMW Group holds PCI DSS certification.

Neither Mercedes-Benz Group AG nor BMW Group holds HIPAA certification.

Neither Mercedes-Benz Group AG nor BMW Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References