Comparison Overview

Newegg

VS

CarMax

Newegg

21688 Gateway Center Dr, 300, Diamond Bar, California, US, 91765
Last Update: 2025-12-18
View Profile
Between 700 and 749
http://www.newegg.com

Newegg Inc. is the leading tech-focused e-retailer in North America, with a global reach in Europe, South America, Asia Pacific and the Middle East. Founded in 2001, the company offers its tens of millions of registered users a comprehensive selection of the latest consumer electronics, entertainment, smart home, gaming products, and much more! Newegg is consistently ranked as one of the best online shopping destinations, and the company regularly earns industry-leading customer service ratings. Newegg is headquartered in City of Industry, California, with North American distribution facilities located throughout the United States and Canada. Interested in selling on Newegg.com? We offer robust fulfillment and marketing services to our Marketplace vendors. Learn more: newegg.io/sellers

NAICS: 43
NAICS Definition: Retail Trade
Employees: 1,353
Subsidiaries: 2
12-month incidents
0
Known data breaches
2
Attack type number
1
View Profile

CarMax

12800 Tuckahoe Creek Parkway, Richmond, Virginia, 23238, US
Last Update: 2025-12-17
Between 750 and 799
http://carmax.com

CarMax revolutionized the auto industry by delivering the honest, transparent and high-integrity car buying experience customers want and deserve. This disruptive thinking has helped us become the nation’s largest retailer of used cars with more than 240 stores nationwide. And thanks to our amazing team of nearly 30,000 associates, we have been recognized as one of the FORTUNE 100 Best Companies to Work For® - 20 years in a row! Committed to hiring people with strong values of integrity, transparency and respect, we offer unmatched training and support for associate career growth, and have been recognized as an award winner of Training Magazine’s "Apex Awards". We are also proud to be a best place to work for Veterans and recognized on Forbes Best Workplaces for Diversity list.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 16,699
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/newegg-com.jpeg
Newegg
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/carmax.jpeg
CarMax
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Newegg
100%
Compliance Rate
0/4 Standards Verified
CarMax
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Newegg in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for CarMax in 2025.

Incident History — Newegg (X = Date, Y = Severity)

Newegg cyber incidents detection timeline including parent company and subsidiaries

Incident History — CarMax (X = Date, Y = Severity)

CarMax cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/newegg-com.jpeg
Newegg
Incidents

Date Detected: 8/2018
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 6/2016
Type:Breach
Attack Vector: Code Injection
Motivation: Financial Gain
Blog: Blog
https://images.rankiteo.com/companyimages/carmax.jpeg
CarMax
Incidents

No Incident

FAQ

CarMax company demonstrates a stronger AI Cybersecurity Score compared to Newegg company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Newegg company has historically faced a number of disclosed cyber incidents, whereas CarMax company has not reported any.

In the current year, CarMax company and Newegg company have not reported any cyber incidents.

Neither CarMax company nor Newegg company has reported experiencing a ransomware attack publicly.

Newegg company has disclosed at least one data breach, while the other CarMax company has not reported such incidents publicly.

Neither CarMax company nor Newegg company has reported experiencing targeted cyberattacks publicly.

Neither Newegg company nor CarMax company has reported experiencing or disclosing vulnerabilities publicly.

Neither Newegg nor CarMax holds any compliance certifications.

Neither company holds any compliance certifications.

Newegg company has more subsidiaries worldwide compared to CarMax company.

CarMax company employs more people globally than Newegg company, reflecting its scale as a Retail.

Neither Newegg nor CarMax holds SOC 2 Type 1 certification.

Neither Newegg nor CarMax holds SOC 2 Type 2 certification.

Neither Newegg nor CarMax holds ISO 27001 certification.

Neither Newegg nor CarMax holds PCI DSS certification.

Neither Newegg nor CarMax holds HIPAA certification.

Neither Newegg nor CarMax holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References