Comparison Overview

Newegg

VS

Speedway

Newegg

21688 Gateway Center Dr, 300, Diamond Bar, California, US, 91765
Last Update: 2025-12-18
View Profile
Between 700 and 749
http://www.newegg.com

Newegg Inc. is the leading tech-focused e-retailer in North America, with a global reach in Europe, South America, Asia Pacific and the Middle East. Founded in 2001, the company offers its tens of millions of registered users a comprehensive selection of the latest consumer electronics, entertainment, smart home, gaming products, and much more! Newegg is consistently ranked as one of the best online shopping destinations, and the company regularly earns industry-leading customer service ratings. Newegg is headquartered in City of Industry, California, with North American distribution facilities located throughout the United States and Canada. Interested in selling on Newegg.com? We offer robust fulfillment and marketing services to our Marketplace vendors. Learn more: newegg.io/sellers

NAICS: 43
NAICS Definition: Retail Trade
Employees: 1,353
Subsidiaries: 2
12-month incidents
0
Known data breaches
2
Attack type number
1
View Profile

Speedway

500 Speedway Drive, Enon, OH, US, 45323
Last Update: 2025-12-17
Between 700 and 749
http://speedway.com/careers

Speedway operates across the U.S., predominately in the Midwest and East Coast. In May 2021, 7-Eleven acquired 3,800 Speedway Stores from Marathon Petroleum Corp., increasing 7-Eleven’s total number of stores to more than 13,000 in the U.S. and Canada and allowing 7-Eleven to bring convenience to more customers than ever before. Learn more about 7-Eleven and their family of brands here: https://corp.7-eleven.com/corp/about

NAICS: 43
NAICS Definition: Retail Trade
Employees: 18,314
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/newegg-com.jpeg
Newegg
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/speedway.jpeg
Speedway
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Newegg
100%
Compliance Rate
0/4 Standards Verified
Speedway
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Newegg in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Speedway in 2025.

Incident History — Newegg (X = Date, Y = Severity)

Newegg cyber incidents detection timeline including parent company and subsidiaries

Incident History — Speedway (X = Date, Y = Severity)

Speedway cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/newegg-com.jpeg
Newegg
Incidents

Date Detected: 8/2018
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 6/2016
Type:Breach
Attack Vector: Code Injection
Motivation: Financial Gain
Blog: Blog
https://images.rankiteo.com/companyimages/speedway.jpeg
Speedway
Incidents

Date Detected: 4/2023
Type:Breach
Blog: Blog

FAQ

Speedway company demonstrates a stronger AI Cybersecurity Score compared to Newegg company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Newegg company has faced a higher number of disclosed cyber incidents historically compared to Speedway company.

In the current year, Speedway company and Newegg company have not reported any cyber incidents.

Neither Speedway company nor Newegg company has reported experiencing a ransomware attack publicly.

Both Speedway company and Newegg company have disclosed experiencing at least one data breach.

Neither Speedway company nor Newegg company has reported experiencing targeted cyberattacks publicly.

Neither Newegg company nor Speedway company has reported experiencing or disclosing vulnerabilities publicly.

Neither Newegg nor Speedway holds any compliance certifications.

Neither company holds any compliance certifications.

Newegg company has more subsidiaries worldwide compared to Speedway company.

Speedway company employs more people globally than Newegg company, reflecting its scale as a Retail.

Neither Newegg nor Speedway holds SOC 2 Type 1 certification.

Neither Newegg nor Speedway holds SOC 2 Type 2 certification.

Neither Newegg nor Speedway holds ISO 27001 certification.

Neither Newegg nor Speedway holds PCI DSS certification.

Neither Newegg nor Speedway holds HIPAA certification.

Neither Newegg nor Speedway holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References