Comparison Overview

Orange

VS

TELUS

Orange

111, Quai du Président Roosevelt, None, Issy-les-Moulineaux, Île-de-France, FR, 92130
Last Update: 2025-12-11
Between 0 and 549

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

NAICS: 517
NAICS Definition: Telecommunications
Employees: 132,461
Subsidiaries: 26
12-month incidents
3
Known data breaches
3
Attack type number
3

TELUS

510 West Georgia St., Vancouver, British Columbia, V6B 0M3, CA
Last Update: 2025-12-09
Between 750 and 799

At TELUS, our purpose-driven team works together every day to innovate and do good. From providing technology solutions that make our lives safer and easier, to supporting those who need it most, our inclusive, spirited and giving people are passionate about empowering our customers, communities and each other to thrive in our digital world. A company that helps you be your best self at home and at work: Find a place where you truly belong, your opinions are valued and you can be your best self. A career that ignites your full potential: Get the guidance and support you need to explore your interests, build your skills and get where you want to go. A culture that goes beyond the expected to strengthen communities and the planet: Seize the opportunity to make a difference in our communities and do good for our planet as part of our purpose-driven team. An innovative team committed to solving complex, real world problems: Join a digitally-enabled workforce that’s pushing the boundaries to create sustainable change. Join us, and let’s make the future friendly, together www.telus.com/careers

NAICS: 517
NAICS Definition: Telecommunications
Employees: 34,521
Subsidiaries: 7
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/orange.jpeg
Orange
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/telus.jpeg
TELUS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Orange
100%
Compliance Rate
0/4 Standards Verified
TELUS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Telecommunications Industry Average (This Year)

Orange has 294.74% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Telecommunications Industry Average (This Year)

No incidents recorded for TELUS in 2025.

Incident History — Orange (X = Date, Y = Severity)

Orange cyber incidents detection timeline including parent company and subsidiaries

Incident History — TELUS (X = Date, Y = Severity)

TELUS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/orange.jpeg
Orange
Incidents

Date Detected: 9/2025
Type:Cyber Attack
Attack Vector: Exploitation de données personnelles volées, Ingénierie sociale, SIM swapping
Motivation: Fraude financière, Vol d'identité, Accès non autorisé à des comptes en ligne
Blog: Blog

Date Detected: 8/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 7/2025
Type:Ransomware
Attack Vector: ransomware (Warlock), system compromise
Motivation: financial gain, data theft
Blog: Blog
https://images.rankiteo.com/companyimages/telus.jpeg
TELUS
Incidents

No Incident

FAQ

TELUS company demonstrates a stronger AI Cybersecurity Score compared to Orange company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Orange company has historically faced a number of disclosed cyber incidents, whereas TELUS company has not reported any.

In the current year, Orange company has reported more cyber incidents than TELUS company.

Orange company has confirmed experiencing a ransomware attack, while TELUS company has not reported such incidents publicly.

Orange company has disclosed at least one data breach, while the other TELUS company has not reported such incidents publicly.

Orange company has reported targeted cyberattacks, while TELUS company has not reported such incidents publicly.

Neither Orange company nor TELUS company has reported experiencing or disclosing vulnerabilities publicly.

Neither Orange nor TELUS holds any compliance certifications.

Neither company holds any compliance certifications.

Orange company has more subsidiaries worldwide compared to TELUS company.

Orange company employs more people globally than TELUS company, reflecting its scale as a Telecommunications.

Neither Orange nor TELUS holds SOC 2 Type 1 certification.

Neither Orange nor TELUS holds SOC 2 Type 2 certification.

Neither Orange nor TELUS holds ISO 27001 certification.

Neither Orange nor TELUS holds PCI DSS certification.

Neither Orange nor TELUS holds HIPAA certification.

Neither Orange nor TELUS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X