Comparison Overview

Nancy Bond Insurance Services

VS

State Farm

Nancy Bond Insurance Services

201 W. Lemon Avenue, Monrovia, CA, 91016, US
Last Update: 2025-05-05 (UTC)
Between 900 and 1000
http://www.nancybondinsurance.com

Excellent

NBIS - a full-service independent insurance agency here to help serve your insurance needs! We are STELLAR with customer service, and know just how to help you save money and get top-notch coverage. We have a very knowledgeable staff, and a passion for being involved in the communities that we serve.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 10
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

State Farm

One State Farm Plaza, None, Bloomington, Illinois, US, 61710
Last Update: 2025-07-26 (UTC)

Excellent

Between 900 and 1000
https://www.statefarm.com/careers

At State Farm®, our mission is to help people manage the risks of everyday life, recover from the unexpected, and realize their dreams. We are passionate and driven to create possibilities, and we’re serious about helping customers by providing solutions for all of life’s moments. Like a good neighbor, State Farm is there.®

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 107,042
Subsidiaries: 1
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nancy-bond-insurance-services.jpeg
Nancy Bond Insurance Services
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/state_farm.jpeg
State Farm
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Nancy Bond Insurance Services
100%
Compliance Rate
0/4 Standards Verified
State Farm
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Nancy Bond Insurance Services in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for State Farm in 2025.

Incident History — Nancy Bond Insurance Services (X = Date, Y = Severity)

Nancy Bond Insurance Services cyber incidents detection timeline including parent company and subsidiaries

Incident History — State Farm (X = Date, Y = Severity)

State Farm cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nancy-bond-insurance-services.jpeg
Nancy Bond Insurance Services
Incidents

No Incident

https://images.rankiteo.com/companyimages/state_farm.jpeg
State Farm
Incidents

Date Detected: 7/2012
Type:Breach
Attack Vector: Insider Misuse
Blog: Blog

Date Detected: 3/2012
Type:Breach
Blog: Blog

FAQ

Both Nancy Bond Insurance Services company and State Farm company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

State Farm company has historically faced a number of disclosed cyber incidents, whereas Nancy Bond Insurance Services company has not reported any.

In the current year, State Farm company and Nancy Bond Insurance Services company have not reported any cyber incidents.

Neither State Farm company nor Nancy Bond Insurance Services company has reported experiencing a ransomware attack publicly.

State Farm company has disclosed at least one data breach, while Nancy Bond Insurance Services company has not reported such incidents publicly.

Neither State Farm company nor Nancy Bond Insurance Services company has reported experiencing targeted cyberattacks publicly.

Neither Nancy Bond Insurance Services company nor State Farm company has reported experiencing or disclosing vulnerabilities publicly.

State Farm company has more subsidiaries worldwide compared to Nancy Bond Insurance Services company.

State Farm company employs more people globally than Nancy Bond Insurance Services company, reflecting its scale as a Insurance.

Latest Global CVEs (Not Company-Specific)

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 5.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:L/U:Amber
References
Description

pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer is configured to listen on 0.0.0.0, this allows attackers across the entire network to perform arbitrary remote code execution by sending malicious pickled payloads through the set_configs action. Additional vulnerability points exist in the cache_garbage_collect, do_put, and do_get functions where pickle.loads is used to deserialize untrusted remote data.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References