Comparison Overview

Oregon Zoo

VS

Western Museums Association (WMA)

Oregon Zoo

4001 SW Canyon RD, None, Portland, OR, US, 97221
Last Update: 2026-01-23
Between 700 and 749

The Oregon Zoo connects communities to the wonder of wildlife to create a better future for all. We are a hub for science, conservation, education and animal well-being delivering the highest quality of care to 165 species and subspecies. Community supported since 1888, we are part of Metro, greater Portland’s regional government — inspiring and welcoming guests and community members of all ages, abilities and backgrounds.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 296
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Western Museums Association (WMA)

None, None, West of the Rockies, CA, US, None
Last Update: 2026-01-18
Between 750 and 799

The Western Museums Association (WMA) is a nonprofit, membership organization dedicated to serving museums, museum professionals, and related institutions by providing vision, enrichment, and intellectual challenge, as well as a forum for communication and interaction. Through training and educational programs, the WMA empowers the diverse museum community of the West to cultivate leadership and enable institutions to remain relevant in a dynamic world. Additionally, the WMA creates opportunities for its constituents to build skill sets to better serve their communities through their museums by providing professional development opportunities west of the Rockies, including in Alaska and Hawaii, the western Canadian provinces of Alberta, and British Columbia, among others. The WMA is a self-sustaining network of museum professionals strengthened by memberships (individual, institutional, and corporate), WMA's premier Annual Meeting, and valued partnerships.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 9
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/oregon-zoo.jpeg
Oregon Zoo
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/western-museums-association.jpeg
Western Museums Association (WMA)
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Oregon Zoo
100%
Compliance Rate
0/4 Standards Verified
Western Museums Association (WMA)
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Oregon Zoo in 2026.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Western Museums Association (WMA) in 2026.

Incident History — Oregon Zoo (X = Date, Y = Severity)

Oregon Zoo cyber incidents detection timeline including parent company and subsidiaries

Incident History — Western Museums Association (WMA) (X = Date, Y = Severity)

Western Museums Association (WMA) cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/oregon-zoo.jpeg
Oregon Zoo
Incidents

Date Detected: 12/2023
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/western-museums-association.jpeg
Western Museums Association (WMA)
Incidents

No Incident

FAQ

Western Museums Association (WMA) company demonstrates a stronger AI Cybersecurity Score compared to Oregon Zoo company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Oregon Zoo company has historically faced a number of disclosed cyber incidents, whereas Western Museums Association (WMA) company has not reported any.

In the current year, Western Museums Association (WMA) company and Oregon Zoo company have not reported any cyber incidents.

Neither Western Museums Association (WMA) company nor Oregon Zoo company has reported experiencing a ransomware attack publicly.

Oregon Zoo company has disclosed at least one data breach, while the other Western Museums Association (WMA) company has not reported such incidents publicly.

Neither Western Museums Association (WMA) company nor Oregon Zoo company has reported experiencing targeted cyberattacks publicly.

Neither Oregon Zoo company nor Western Museums Association (WMA) company has reported experiencing or disclosing vulnerabilities publicly.

Neither Oregon Zoo nor Western Museums Association (WMA) holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Oregon Zoo company nor Western Museums Association (WMA) company has publicly disclosed detailed information about the number of their subsidiaries.

Oregon Zoo company employs more people globally than Western Museums Association (WMA) company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Oregon Zoo nor Western Museums Association (WMA) holds SOC 2 Type 1 certification.

Neither Oregon Zoo nor Western Museums Association (WMA) holds SOC 2 Type 2 certification.

Neither Oregon Zoo nor Western Museums Association (WMA) holds ISO 27001 certification.

Neither Oregon Zoo nor Western Museums Association (WMA) holds PCI DSS certification.

Neither Oregon Zoo nor Western Museums Association (WMA) holds HIPAA certification.

Neither Oregon Zoo nor Western Museums Association (WMA) holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description

Azure Entra ID Elevation of Privilege Vulnerability

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H