What is the official website of Nona Source ?

The official website of Nona Source is http://www.nona-source.com.

What is Nona Source's cybersecurity risk score?

Nona Source has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Nona Source experienced?

According to Rankiteo, Nona Source currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Nona Source been affected by any supply chain cyber incidents ?

According to Rankiteo, Nona Source has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: TIFLVMCHR1770865579) Gainsight (Incident ID: GAI0292402112125)

Does Nona Source have SOC 2 Type 1 certification ?

According to Rankiteo, Nona Source is not certified under SOC 2 Type 1.

Does Nona Source have SOC 2 Type 2 certification ?

According to Rankiteo, Nona Source does not hold a SOC 2 Type 2 certification.

Does Nona Source comply with GDPR ?

According to Rankiteo, Nona Source is not listed as GDPR compliant.

Does Nona Source have PCI DSS certification ?

According to Rankiteo, Nona Source does not currently maintain PCI DSS compliance.

Does Nona Source comply with HIPAA ?

According to Rankiteo, Nona Source is not compliant with HIPAA regulations.

Does Nona Source have ISO 27001 certification ?

According to Rankiteo,Nona Source is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Nona Source operate in ?

Nona Source operates primarily in the Retail Apparel and Fashion industry.

How many employees does Nona Source have ?

Nona Source employs approximately 29 people worldwide.

Does Nona Source own any subsidiaries ?

Nona Source presently has no subsidiaries across any sectors.

How many LinkedIn followers does Nona Source have ?

Nona Source's official LinkedIn profile has approximately 7,191 followers.

What is the NAICS classification code for Nona Source ?

Nona Source is classified under the NAICS code 448, which corresponds to Clothing and Clothing Accessories Stores.

Does Nona Source have a Crunchbase profile ?

No, Nona Source does not have a profile on Crunchbase.

Does Nona Source have a LinkedIn profile ?

Yes, Nona Source maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nona-source.

How many cybersecurity incidents has Nona Source experienced ?

As of August 2, 2026, Rankiteo reports that Nona Source has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Nona Source have ?

Nona Source has an estimated 5,072 peer or competitor companies worldwide.

What types of cybersecurity incidents has Nona Source faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Nona Source

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Nona Source Vendor Cyber Rating & Cyber Score

nona-source.com

Add Your Compliance Badge

Nona Source is the first online resale platform which re-values deadstock fabrics from the most exclusive French Maisons de Couture. Designed for Creative Talents by materials’ sourcing experts from LVMH, Nona Source offers professionals from the Fashion and Design industries the opportunity to purchase exclusive materials at a competitive price, and in stock-service.

Nona Source A.I CyberSecurity Scoring

Scoring History

Nona Source

Nona Source CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

LVMH

Breach

2/2026

Salesforce

TIFLVMCHR177086...

LVMH

Breach

8/2025

Gainsight

GAI029240211212...

Nona Source

Breach

7/2025

LVM852071225

Loading…

A.I.

Nona Source Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Nona Source

Incidents vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for Nona Source in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Nona Source in 2026.

Incident Types Nona Source vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for Nona Source in 2026.

Incident History - Nona Source (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Nona Source Subsidiaries

Nona Source

Retail Apparel and Fashion

Website: http://www.nona-source.com

Company Size: 29

LVMHRetail Luxury Goods and Jewelry

Loading…

Nona Source Similar Companies

Coach

coach.com

Coach was founded in 1941 as a family-run workshop. In a Manhattan loft, six artisans handcrafted a collection of leather goods using skills handed down from generation to generation. Discerning consumers soon began to seek out the quality and unique nature of Coach craftsmanship. Now greatly expanded, Coach is a modern American luxury brand with a rich heritage of craftsmanship and New York style. We continue to maintain the highest standards for materials and workmanship. Coach's exceptional workforce remains committed to carefully upholding the principles of quality and integrity that define the company. We attribute the prominence of the Coach brand to the unique combination of our original American attitude and design, our heritage of fine leather goods and custom fabrics, our superior product quality and durability, and our commitment to customer service.

C&A Brasil

cea.com.br

A C&A foi fundada em 1841 pelos irmãos holandeses Clemens e August. Suas iniciais deram origem ao nome da marca. Somamos mais de 1,8 mil unidades em 24 países da Europa, América Latina e Ásia e estamos entre as maiores redes de varejo do mundo. No Brasil, tudo começou em 1976, com a inauguração da nossa primeira loja no Shopping Ibirapuera, em São Paulo. Claro que, desde lá, muita coisa mudou. Mas nossa filosofia de trabalho continua a mesma – oferecer o melhor da moda por preços acessíveis! Hoje já temos mais de 330 lojas em 150 cidades e mais de 15 mil profissionais empregados. Muita gente, não é!? E sabe qual é o segredo do nosso sucesso? Além da busca constante por inovação, há também nosso esforço para superar as expectativas das pessoas e deixar um legado positivo. Desde outubro de 2019 somos uma empresa listada na Bolsa brasileira (B3), com destaque no varejo brasileiro em aspectos que englobam desde a sustentabilidade na rede de fornecimento até a jornada omnicanal oferecida a nossa cliente. Missão e valores Somos uma empresa inovadora, divertida e, acima de tudo, apaixonada pelas pessoas. Ao longo de mais de 180 anos de história, atuamos com ética e foco para que você e todos os nossas clientes estejam sempre satisfeitos. A responsabilidade social e a transparência acompanham a a marca desde o início e são compartilhadas com quem nos relacionamos - funcionários, fornecedores, clientes, investidores e a comunidade. Publicamos anualmente o Relatório de Sustentabilidade, reforçando o compromisso com a transparência em todas as áreas de atuação da empresa e construindo uma moda com impacto positivo. Informamos que tópicos de publicidade, spam ou que não estiverem de acordo com a proposta desta página serão removidos.

Aditya Birla Fashion and Retail Ltd.

abfrl.com

Aditya Birla Fashion and Retail Limited (ABFRL), part of the Aditya Birla Group, is India’s leading fashion powerhouse, offering a distinguished portfolio of renowned brands and retail formats, catering to multiple high-growth segments. As of March 31, 2025, the Company has presence across 1,167 stores spanning 7.3 Mn sq.ft. retail space. ABFRL’s portfolio includes Pantaloons, one of India’s most loved fashion destinations, and OWND!, a growing value retail format. The Company also operates The Collective, who commands a dominant position as one of the country’s most influential multi-brand luxury retailers, with exclusive long-term tie-ups with global fashion brands including Ralph Lauren, Hackett London, Ted Baker and Fred Perry. ABFRL has also partnered with Paris based Galeries Lafayette to introduce a high-end luxury destination in India. ABFRL is a market leader in branded ethnic wear, its portfolio includes Jaypore, Tasva and TCNS brands and it has forged strategic partnerships with India’s top designers such as Shantnu & Nikhil, Tarun Tahiliani, Sabyasachi, and House of Masaba. Recently, the Company further expanded its ethnic wear leadership with the integration of TCNS brands, home to leading women’s brands W, Aurelia, Wishful, Elleven and Folksong. To address the evolving preferences of digitally native consumers, ABFRL is also building a portfolio of new-age, digital-first fashion brands under its tech-led venture TMRW. This platform collaborates with emerging entrepreneurs to co-create scalable fashion businesses in India’s rapidly expanding fashion ecosystem.

Tailored Brands, Inc.

cb tailoredbrands.com

Our Purpose: We help people love the way they look and feel for their most important moments. Our Values: • Customer-First - We put customers at the center of every decision • Win Together - We rally together to achieve common goals • Better Every Day - We strive for excellence and continuous improvement • Everyone Is Welcome - We value differences and know they make us better • Act With Integrity - We show up with courage to always do the right thing

URBN (Urban Outfitters, Anthropologie Group, Free People & Nuuly)

urbn.com

URBN Urban Outfitters, Inc. (www.urbn.com) is a portfolio of global consumer brands comprised of Anthropologie, Anthropologie Weddings, Free People, FP Movement, Terrain, Urban Outfitters, Nuuly, Reclectic, and Menus & Venues. At URBN, we Lead with Creativity…. Creativity guides our approach to product, environment, experience, and community. It drives our vision, strategy, and decision-making. It touches every job at URBN. Over the last 50 years, we have inspired our customers through our creative and entrepreneurial approach to products and services.

Levi Strauss & Co.

cb levistrauss.com

You’re an original. So are we. We’re a company of people who like to forge our own path. We invented the blue jean in 1873, and we reinvented khaki pants in 1986. We pioneered labor and environmental guidelines in manufacturing. And we work to build sustainability into everything we do. We just might be the original startup. Our brands — Levi’s®, Dockers®, Beyond Yoga®, Denizen® and Signature by Levi Strauss & Co.™ — stand for freedom and self-expression around the world. And for more than 170 years, we’ve used the strength of our brands to lead with our values and make an outsized impact on the world. There’s plenty of room to make your mark here. We employ more than 15,000 people around the world, and this is a place where everyone contributes to the conversation. Levi Strauss & Co. is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.

Saks Global

saksglobal.com

Saks Global is the largest multi-brand luxury retailer in the world, comprising Saks Fifth Avenue, Neiman Marcus, Bergdorf Goodman, Saks OFF 5TH, Last Call and Horchow. Its retail portfolio includes 70 full-line luxury locations, additional off-price locations and five distinct e-commerce experiences. With talented colleagues focused on delivering on our strategic vision, The Art of You, Saks Global is redefining luxury shopping by offering each customer a personalized experience that is unmistakably their own. By leveraging the most comprehensive luxury customer data platform in North America, cutting-edge technology, and strong partnerships with the world's most esteemed brands, Saks Global is shaping the future of luxury retail. Saks Global Properties & Investments includes Saks Fifth Avenue and Neiman Marcus flagship properties and represents nearly 13 million square feet of prime U.S. real estate holdings and investments in luxury markets. Interested in joining our world-class team of professionals? Visit https://careers.saksglobal.com/us/en to explore career opportunities across Saks Global.

Tommy Hilfiger

tommy.com

TOMMY HILFIGER is one of the world’s leading designer lifestyle brands creating a platform that inspires the modern American spirit, while committing to wasting nothing and welcoming all. Founded in 1985, Tommy Hilfiger delivers premium styling, quality and value to consumers worldwide under the TOMMY HILFIGER and TOMMY JEANS brands, with a breadth of collections including HILFIGER COLLECTION, TOMMY HILFIGER TAILORED, men’s, women’s and kids’ sportswear, denim, accessories, and footwear. In addition, the brand is licensed for a range of products, including fragrances, eyewear, watches and home furnishings. Founder Tommy Hilfiger remains the company’s Principal Designer and provides leadership and direction for the design process. Tommy Hilfiger, which was acquired by PVH Corp. in 2010, is a global apparel and retail company with more than 16,000 associates worldwide. With the support of strong global consumer recognition, Tommy Hilfiger has built an extensive distribution network in over 100 countries and more than 2,000 retail stores throughout North America, Europe, Latin America and the Asia Pacific region. Global retail sales of the TOMMY HILFIGER brand were US $9.2 billion in 2019.

J.Crew

jcrew.com

Since 1983, we’ve been designing pieces that feel both familiar and refreshingly new, crafted with unbeatable quality and distinctive point of view...it’s no wonder we’ve been in your closet for four decades and counting. Today, we continue to do the classics our way, inspiring not only how you shop but also how you express your personal style. Our commitment runs deeper than just making great clothes—we're proud of our role in getting you dressed with confidence, character and the unique style sensibility that makes us who we are.

Loading…

NEWS

Nona Source CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 27, 2021 07:00 AM

LVMH launches luxury deadstock resale site—making good on the fashion industry's past mistakes

The new online marketplace called Nona Source will re-sell fabrics and leathers that were once carefully selected by designers working at one of the many...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…