What is the official website of OBRAMAT ?

The official website of OBRAMAT is http://obramat.es.

What is OBRAMAT's cybersecurity risk score?

OBRAMAT has an AI-generated cybersecurity risk score of 782 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has OBRAMAT experienced?

According to Rankiteo, OBRAMAT currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OBRAMAT been affected by any supply chain cyber incidents ?

According to Rankiteo, OBRAMAT has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does OBRAMAT have SOC 2 Type 1 certification ?

According to Rankiteo, OBRAMAT is not certified under SOC 2 Type 1.

Does OBRAMAT have SOC 2 Type 2 certification ?

According to Rankiteo, OBRAMAT does not hold a SOC 2 Type 2 certification.

Does OBRAMAT comply with GDPR ?

According to Rankiteo, OBRAMAT is not listed as GDPR compliant.

Does OBRAMAT have PCI DSS certification ?

According to Rankiteo, OBRAMAT does not currently maintain PCI DSS compliance.

Does OBRAMAT comply with HIPAA ?

According to Rankiteo, OBRAMAT is not compliant with HIPAA regulations.

Does OBRAMAT have ISO 27001 certification ?

According to Rankiteo,OBRAMAT is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OBRAMAT operate in ?

OBRAMAT operates primarily in the Retail industry.

How many employees does OBRAMAT have ?

OBRAMAT employs approximately 3,274 people worldwide.

Does OBRAMAT own any subsidiaries ?

OBRAMAT presently has no subsidiaries across any sectors.

How many LinkedIn followers does OBRAMAT have ?

OBRAMAT's official LinkedIn profile has approximately 104,343 followers.

What is the NAICS classification code for OBRAMAT ?

OBRAMAT is classified under the NAICS code 43, which corresponds to Retail Trade.

Does OBRAMAT have a Crunchbase profile ?

No, OBRAMAT does not have a profile on Crunchbase.

Does OBRAMAT have a LinkedIn profile ?

Yes, OBRAMAT maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/obramat.

How many cybersecurity incidents has OBRAMAT experienced ?

As of August 30, 2026, Rankiteo reports that OBRAMAT has experienced 1 cybersecurity incidents.

How many peer or competitor companies does OBRAMAT have ?

OBRAMAT has an estimated 15,973 peer or competitor companies worldwide.

What types of cybersecurity incidents has OBRAMAT faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OBRAMAT

Boost Score +25 with badge (5 left)

782

/1000

Fair

807

/1000

Good

OBRAMAT Vendor Cyber Rating & Cyber Score

obramat.es

Add Your Compliance Badge

OBRAMAT es la empresa de referencia en el mercado de distribución de materiales de Construcción y Reforma orientada principalmente al sector profesional, cuyo objetivo es poner al servicio de sus Clientes los mejores productos del mercado, con más de 20.000 referencias de las primeras marcas. A través de un equipo compuesto por 38 Almacenes y más de 6.000 profesionales expertos ofrece, tanto a PYMES como autónomos, una excelente experiencia de compra y soluciones prácticas para hacer crecer su negocio con un servicio rápido y de calidad.

OBRAMAT A.I CyberSecurity Scoring

Scoring History

OBRAMAT

OBRAMAT CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

OBRAMAT

Breach

12/2025

LER1764792040

Loading…

A.I.

OBRAMAT Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OBRAMAT

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for OBRAMAT in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for OBRAMAT in 2026.

Incident Types OBRAMAT vs Retail Industry Avg (This Year)

No incidents recorded for OBRAMAT in 2026.

Incident History - OBRAMAT (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OBRAMAT Subsidiaries

OBRAMAT

Retail

Website: http://obramat.es

Company Size: 5,001-10,000 employees

ADEORetail

Leroy MerlinRetail

OBRAMAXWholesale Building Materials

BRICOMANRetail

Bricocenter ItaliaRetail

KBANERetail

AKIRetail

GolillaTruck Transportation

Quotatis UKConsumer Services

Quotatis - Electrician LeadsAdvertising Services

ADEO Positive TechRetail

ENKI HomeTechnology, Information and Internet

QuotatisTechnology, Information and Internet

Loading…

OBRAMAT Similar Companies

Wayfair

cb aboutwayfair.com

Wayfair is the destination for all things home: helping everyone, anywhere create their feeling of home. From expert customer service, to the development of tools that make the shopping process easier, to carrying one of the widest and deepest selections of items for every space, style, and budget, Wayfair gives everyone the power to create spaces that are just right for them.

lululemon

cb lululemon.com

If you are seeking a job opportunity with lululemon, please note that our recruiters will only contact candidates using an @lululemon.com email address. -- lululemon athletica inc. (NASDAQ:LULU) is a healthy lifestyle inspired athletic apparel company for yoga, running, training, and most other sweaty pursuits, creating transformational products and experiences which enable people to live a life they love. Setting the bar in technical fabrics and functional designs, lululemon works with yogis and athletes in local communities for continuous research and product feedback.

GPA

gpabr.com

We are one of the largest food retail companies in Brazil. We were pioneers with a multi-format and multi-channel business model that brings together renowned chains and brands such as Pão de Açúcar and Extra, Minuto Pão de Açúcar, Pão de Açúcar Fresh and Mini Extra. In addition to our own and exclusive brands Qualitá, Taeq and Club des Sommeliers. We have more than 765 physical stores and are leaders in food e-commerce in Brazil, working tirelessly to be the best choice for our customers and the pride of our team. We are driven by a passion to serve and win. Our people are committed to our values to offer the best shopping experience in our stores. In all areas, regardless of role or position, everyone is focused on serving and delighting our customers every day.

Chewy

cb chewy.com

At Chewy, our mission is to be the most trusted and convenient destination for pet parents and partners, everywhere. We view pets and pet parents as family and are obsessed with meeting their needs and exceeding customer expectations through every interaction. Behind the scenes, our talented teams are made up of innovators, delighters, big-thinkers and of course, passionate pet people—creating a place where you'll be empowered to build, grow and unleash your fullest potential. We don’t just stand by our company mission—we’re obsessed with it. We seek to be the most trusted and convenient destination for pet parents and partners, everywhere. And we’re constantly finding new ways to do just that. At Chewy, we understand pet parenthood is full of joyful highs and anxious lows. That’s why we’re here, standing alongside pet parents, providing everything their pets need for a happy, healthy life. We’re a leading online source for pet products, supplies, and prescriptions. We offer a broad selection of high-quality products and services at competitive prices with an exceptional level of customer care and a personal touch. Since launching in 2011, we’ve combined the personalized service of your neighborhood pet store with the convenience and speed of e-commerce. We pride ourselves on being the only brand available 24/7/365 to support pet parents throughout their journey. We have a rich history of being recognized for our deep care and personalization while going above and beyond for our customers and their pets. We view pets and their people as more than just customers and look forward to meeting their needs and exceeding expectations through every interaction. With Chewy, no one pet-parents alone.

Sunbelt Rentals, Inc.

snblt.co

At Sunbelt Rentals, we provide the tools, equipment, and support our customers need to build and maintain the world around us. With locations across the U.S. and Canada and a team of passionate experts, we're here to ensure our customers have what they need to get the job done right—safely, efficiently, and on time. From major construction sites to backyard projects, our fleet of equipment is ready to tackle jobs of any size. Wherever the work takes you, we’re ready to help. Social Media Community Guidelines: https://www.sunbeltrentals.com/legal/website/social-community-guidelines/

Ace Hardware Corporation

acehardware.com

Ace Hardware is the largest retailer-owned hardware cooperative in the world with over 5,800 locally owned and operated hardware stores in approximately 70 countries. Headquartered in Oak Brook, Ill., Ace and its subsidiaries operate an expansive network of distribution centers in the U.S. and have distribution capabilities in Ningbo, China; and Santa Catarina, Mexico. Since 1924, Ace has become a part of local communities around the world and known as the place with the helpful hardware folks. For more information, visit acehardware.com or newsroom.acehardware.com.

Raia

drogaraia.com.br

Nossa página oficial no LinkedIn é https://bit.ly/2XT3eZl Fundada em 1905 na cidade de Araraquara, a Raia é uma das bandeiras da RD Saúde (Raia Drogasil S.A.) e possui mais de 1000 farmácias em todo o Brasil. A RD Saúde é um ecossistema de saúde integral, com 3 mil farmácias em todo o Brasil e negócios em saúde que dividem o mesmo propósito: contribuir para uma sociedade mais saudável. Sua jornada começou em novembro de 2011, fruto da união entre Raia e Drogasil, crescendo até se tornar a maior rede de farmácias do Brasil e expandindo para além do varejo farmacêutico, integrando soluções B2B e plataformas digitais.

Dillard's

cb Dillards.com

Dillard's, Inc. ranks among the nation's largest fashion apparel and home furnishings retailers with annual revenues exceeding $6.1 billion. The Company focuses on delivering maximum fashion and value to its shoppers by offering compelling apparel and home selections complemented by exceptional customer care. Dillard's stores offer a broad selection of merchandise and feature products from both national and exclusive brand sources. The Company operates nearly 300 Dillard's locations spanning 29 states, all with one nameplate - Dillard's.

Apollo Pharmacy

apollopharmacy.in

Apollo Pharmacy is a part of Apollo Hospitals - India’s trusted pharmacy. It is India's first and largest branded pharmacy network, with over 6500 plus outlets in key locations Accredited with - International Quality Certification, Apollo Pharmacy offers genuine medicines round-the-clock, through our 24-hour Pharmacies. Apollo Pharmacy also provides customer care any time of the day!

Loading…

NEWS

OBRAMAT CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-82424

SUMMARY

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82423

SUMMARY

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 5.4)

cvss2

Base Score: 5.5

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:P

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-82422

SUMMARY

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82421

SUMMARY

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15369

SUMMARY

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the af_reg_checkout_data_to_order_meta_data_block() function, persisting it in order meta, and then passing it directly to WP_User::add_role() in the af_reg_custom_order_processing_function() function (hooked to woocommerce_thankyou) without validating against the plugin's admin-configured allowed role list. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by creating an account during checkout with a modified JSON body specifying administrator (or any other role slug) as the desired role. Note: The exploit requires the "User Role Selection" setting to be enabled.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…