What is the official website of Nuuly ?

The official website of Nuuly is http://www.nuuly.com.

What is Nuuly's cybersecurity risk score?

Nuuly has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Nuuly experienced?

According to Rankiteo, Nuuly currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Nuuly been affected by any supply chain cyber incidents ?

According to Rankiteo, Nuuly has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Nuuly have SOC 2 Type 1 certification ?

According to Rankiteo, Nuuly is not certified under SOC 2 Type 1.

Does Nuuly have SOC 2 Type 2 certification ?

According to Rankiteo, Nuuly does not hold a SOC 2 Type 2 certification.

Does Nuuly comply with GDPR ?

According to Rankiteo, Nuuly is not listed as GDPR compliant.

Does Nuuly have PCI DSS certification ?

According to Rankiteo, Nuuly does not currently maintain PCI DSS compliance.

Does Nuuly comply with HIPAA ?

According to Rankiteo, Nuuly is not compliant with HIPAA regulations.

Does Nuuly have ISO 27001 certification ?

According to Rankiteo,Nuuly is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Nuuly operate in ?

Nuuly operates primarily in the Retail industry.

How many employees does Nuuly have ?

Nuuly employs approximately 254 people worldwide.

Does Nuuly own any subsidiaries ?

Nuuly presently has no subsidiaries across any sectors.

How many LinkedIn followers does Nuuly have ?

Nuuly's official LinkedIn profile has approximately 34,941 followers.

Does Nuuly have a Crunchbase profile ?

No, Nuuly does not have a profile on Crunchbase.

Does Nuuly have a LinkedIn profile ?

Yes, Nuuly maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nuuly.

How many cybersecurity incidents has Nuuly experienced ?

As of October 6, 2026, Rankiteo reports that Nuuly has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Nuuly have ?

Nuuly has an estimated 16,044 peer or competitor companies worldwide.

What types of cybersecurity incidents has Nuuly faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Nuuly

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

Nuuly Vendor Cyber Rating & Cyber Score

nuuly.com

Add Your Compliance Badge

Nuuly is a curated destination for anyone who loves fashion and is exploring how to wear and buy it in ways that are gentler on the planet—and their wallets. Get creative with what you wear every day.

Nuuly

Nuuly CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Urban Outfitters

Cyber Attack

3/2026

URB1774700741

Loading…

A.I.

Nuuly Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Nuuly

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Nuuly in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Nuuly in 2026.

Incident Types Nuuly vs Retail Industry Avg (This Year)

No incidents recorded for Nuuly in 2026.

Incident History - Nuuly (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Nuuly Subsidiaries

Nuuly

Retail

Website: http://www.nuuly.com

Company Size: 254

URBN (Urban Outfitters, Anthropologie Group, Free People & Nuuly)Retail Apparel and Fashion

Urban OutfittersRetail Apparel and Fashion

AnthropologieRetail Apparel and Fashion

Anthropologie WeddingsRetail

TerrainRetail

Anthropologie EuropeRetail

Free PeopleRetail Apparel and Fashion

Urban Outfitters EuropeRetail

Loading…

Nuuly Similar Companies

Pilot Flying J

cb pilotflyingj.com

Company Overview Headquartered in Knoxville, Tennessee, Pilot Flying J is the largest operator of travel centers in North America with more than 750 locations throughout the United States and Canada and employs more than 24,000 Team Members. Pilot Flying J services over a million guests every day. History Founded by James Haslam II, the first Pilot gas station was opened in Gate City, Virginia, in 1958. After more than four decades of rapid growth, expansion and partnership, Pilot and Marathon Oil Company entered an agreement to form Pilot Travel Centers in 2001. Over the years, Pilot Travel Centers experienced significant growth and expanded internationally, opening its first travel center in Canada in 2006. In 2007, Pilot bought Marathon Petroleum’s shares and entered a new partnership with CVC Capital Partner in 2008. Two years later, Pilot Travel Centers and Flying J Inc. entered an agreement, officially creating Pilot Flying J on July 1, 2010. Culture Pilot Flying J is a family-owned and operated business. While much has changed over the last fifty-plus years, Pilot Flying J stands by the same principles upon which it was founded decades ago: integrity, customer service and valuing team members.

americanas s.a.

americanas.io

We are Americanas, one of the largest retailers in the country, with over 95 years of history. Our brand, loved by Brazilians, aims to simplify and improve the lives of families. The integration of more than 1,600 stores across all states, along with an e-commerce platform that complements the physical experience, allows us to implement an efficient multichannel sales strategy focused on cash generation and profitability. Based on our operations and mission, we value our people and are committed to making a positive impact on the lives of individuals, communities, and stakeholders, with a focus on reducing inequalities, generating jobs, promoting professional development, and fostering diversity. Here at Americanas, we combine unique assets: people united in the pursuit of operational excellence, millions of customers visiting our stores, website, and app every day, along with a fully integrated ecosystem aimed at providing the best shopping experience for our consumers.

Vans

vans.com

Vans is a globally iconic skate brand, forever rooted in the authentic lifestyle of skateboarding. We are driven by our mission to inspire and empower everyone to live “Off The Wall” – embracing the youthful spirit of freedom, non-conformity, and relentless progression. Yesterday’s “Off The Wall” moment is today’s new normal, and we believe in constantly outdoing ourselves. Together with our communities across the globe, our vision is to push culture forward because we believe that the pursuit of progression never ends, and we are constantly inspired by the future generation of positive catalysts. At Vans, our culture sets us apart and influences everything we do. We are driven by five values: 1.Effortless Authenticity: We embrace those who are unapologetically themselves. 2.Radical Creativity: Creativity remains key to everything we do. 3.Unconventional Community: We are inclusive and connected to our consumers, our communities and each other. 4.Relentless Passion: We listen to our people, our athletes and our consumers. 5.Playful Irreverence: We see through the eyes of youth and celebrate the underdog spirit, so we never take ourselves too seriously. VF Corporation VF Corporation is one of the world’s largest apparel, footwear and accessories companies connecting people to the lifestyles, activities and experiences they cherish most through a family of iconic outdoor, active and workwear brands including Vans®, The North Face®, Timberland® and Dickies®. Our purpose is to power movements of sustainable and active lifestyles for the betterment of people and our planet. We believe that when you discover the difference between a career and a calling, you get so much more out of life. When those lines begin to blur, you start to limit yourself much less and start aiming for more. That’s what we want for everyone who joins us at VF. And frankly, that’s what it takes to thrive.

Amazon Business

amazonbusiness.com

Think there’s a better way to buy for business? So do we. That’s why Amazon Business is changing the world of procurement. We simplify the purchasing process to make it easier for our customers to get the products they need. We solve for our customers’ unmet and undiscovered needs — continuously expanding our selection and adding relevant new tools and features. We’re right for any organization at any stage — starting, growing, transforming. And it’s our instinct to invent — we purposefully question what others don’t, creating unexpectedly better ways of getting things done. This is the official global LinkedIn page for Amazon Business. Follow us for updates.

Family Dollar

cb familydollar.com

When it comes to getting value for everyday items for the entire family in an easy to shop, neighborhood location, Family Dollar is the best place to go. One of the nation’s fastest growing retailers, Family Dollar offers a compelling assortment of merchandise for the whole family ranging from household cleaners to name brand foods, from health and beauty aids to toys, from apparel for every age to home fashions, all for everyday low prices. While shoppers can find many items at $1 or less, most items in the store are priced below $10, which makes shopping fun without stretching the family budget. As shoppers enter their neighborhood Family Dollar, they’ll find great values on the name brands they trust in a clean, well-organized store staffed with friendly team members who are members of the local community. The average size of a Family Dollar store is approximately 7,000 square feet, and most stores are operated in leased facilities. This relatively small footprint allows the Company to open new stores in rural areas and small town, as well as in large urban neighborhoods. Within these markets, the stores are located in shopping centers or as free-standing building and all are convenient to the Company’s customer base. Family Dollar offers a compelling mix of merchandise for the whole family. Ranging from an expanded assortment of refrigerated and frozen foods and health and beauty items to home décor and seasonal items, Family Dollar offers the lowest possible price, the name brand and quality private-brand merchandise customers need and use every day.

MC

sonae.pt

MC is a company from the SONAE group, and is a leader in the food retail industry in Portugal. We are a company made by all, to all. With a history of over 35 years of continuous growth, MC has a distinctive positioning in different business areas, with a vast portfolio of high quality products, services and brands. Currently, MC owns the following brands: Continente (hypermarkets), Continente Modelo (large dimension supermarkets), Continente Bom Dia (small dimension supermarkets), Continente Online (e-commerce), Meu Super (franchising small dimension supermarkets), Bagga (coffee stores and bakeries), Go Natural (bio supermarkets and restaurants), note! (books and stationery), Wells and Arenal (drugstores). With a solid and inclusive base of action, at MC we focus on people, creating value with the contribution of all. We innovate everyday, leading the way to a better tomorrow, always taking into consideration everyone's needs. Everything we are, we built together. And there's nothing more inspiring than this.

JCPenney

jcpenney.com

As we reinvent ourselves to fit the diversity of America, we are looking for motivated, talented people who can emerge as Warriors in our organization. JCPenney offers an inclusive environment and culture where you can find and define yourself - your style, your purpose and your career. We know success is built from the inside out, and our associates are the heartbeat of our Company! JCPenney is now part of Catalyst Brands.

SPAR South Africa

SPAR.co.za

There’s something different about shopping at SPAR, that’s because we’ve created a culture of caring and community to ensure our customers have a consistently enjoyable shopping experience in a uniquely friendly and family orientated store. Nothing means more to us than our valued customers and we believe in going the extra mile to give them the best. From sourcing the finest products to providing willing and efficient staff who take a personal interest in our customers’ needs. In the 1960’s a group made up of 8 wholesalers were given exclusive rights to the SPAR name and brand in 1963 and serviced 500 small retailers. Through business acquisitions and organic growth, today the SPAR Group Ltd operates 6 distribution centres and 1 Build it distribution centre (building materials) and 1 pharmaceutical distribution centre (S BUYS), supplying goods and services to more than 2,000 SPAR stores across Southern Africa.

Tractor Supply Company

tractorsupply.com

For more than 85 years, Tractor Supply has been passionate about serving the needs of recreational farmers, ranchers, homeowners, gardeners, pet enthusiasts and all those who enjoy living Life Out Here. Tractor Supply is the largest rural lifestyle retailer in the U.S., ranking 296 on the Fortune 500. The Company’s more than 52,000 Team Members are known for delivering legendary service and helping customers pursue their passions, whether that means being closer to the land, taking care of animals or living a hands-on, DIY lifestyle. In store and online, Tractor Supply provides what customers need – anytime, anywhere, any way they choose at the low prices they deserve. As part of the Company’s commitment to caring for animals of all kinds, Tractor Supply is proud to include Petsense by Tractor Supply, a pet specialty retailer, and Allivet, a leading online pet pharmacy, in its family of brands. Together, Tractor Supply is able to provide comprehensive solutions for pet care, livestock wellness and rural living, ensuring customers and their animals thrive. From its stores to the customer’s doorstep, Tractor Supply is here to serve and support Life Out Here. As of June 28, 2025, the Company operated 2,335 Tractor Supply stores in 49 states and 207 Petsense by Tractor Supply stores in 23 states.

Loading…

NEWS

Nuuly CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 21, 2025 07:00 AM

These Maternity Clothing Rentals Make Dressing Easy During Pregnancy

Dressing during pregnancy is tricky, but clothing rental services that offer a variety of maternity styles can help your wardrobe grow with...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-105761

SUMMARY

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-105760

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105759

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens to unguarded routes such as /tokenize, causing Prometheus's Family::get_or_create function to permanently create counter and histogram label sets. Those label sets increase process memory usage and enlarge the /metrics response until the service or monitoring path is exhausted. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-105758

SUMMARY

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes accept request-level values for the media_io_kwargs.video.max_frames and media_io_kwargs.video.fps fields without enforcing server-side ceilings. An unauthenticated caller can submit these values to the /tokenize endpoint, causing the sampler to decode every frame selected from attacker-controlled video input, consume disproportionate frontend memory, and potentially terminate the API process before scheduling or admission control. The Rust frontend is not affected because it rejects the media_io_kwargs field. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105757

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Nuuly Vendor Cyber Rating & Cyber Score

Nuuly A.I CyberSecurity Scoring

Nuuly CyberSecurity News & History

Nuuly Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Nuuly

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Nuuly vs Retail Industry Avg (This Year)

Incident History - Nuuly (X = Date, Y = Severity)

Nuuly Subsidiaries

Nuuly

Nuuly Similar Companies

Pilot Flying J

americanas s.a.

Vans

Amazon Business

Family Dollar

MC

JCPenney

SPAR South Africa

Tractor Supply Company

Nuuly CyberSecurity News

These Maternity Clothing Rentals Make Dressing Easy During Pregnancy

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Nuuly CyberSecurity News & History

Nuuly Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Nuuly

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Nuuly vs Retail Industry Avg (This Year)

Incident History - Nuuly (X = Date, Y = Severity)

Nuuly Subsidiaries

Nuuly

Nuuly Similar Companies

Pilot Flying J

americanas s.a.

Vans

Amazon Business

Family Dollar

MC

JCPenney

SPAR South Africa

Tractor Supply Company

Nuuly CyberSecurity News

These Maternity Clothing Rentals Make Dressing Easy During Pregnancy

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo