What is the official website of OXXO ?

The official website of OXXO is http://www.oxxo.com.

What is OXXO's cybersecurity risk score?

OXXO has an AI-generated cybersecurity risk score of 803 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has OXXO experienced?

According to Rankiteo, OXXO currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OXXO been affected by any supply chain cyber incidents ?

According to Rankiteo, OXXO has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does OXXO have SOC 2 Type 1 certification ?

According to Rankiteo, OXXO is not certified under SOC 2 Type 1.

Does OXXO have SOC 2 Type 2 certification ?

According to Rankiteo, OXXO does not hold a SOC 2 Type 2 certification.

Does OXXO comply with GDPR ?

According to Rankiteo, OXXO is not listed as GDPR compliant.

Does OXXO have PCI DSS certification ?

According to Rankiteo, OXXO does not currently maintain PCI DSS compliance.

Does OXXO comply with HIPAA ?

According to Rankiteo, OXXO is not compliant with HIPAA regulations.

Does OXXO have ISO 27001 certification ?

According to Rankiteo,OXXO is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OXXO operate in ?

OXXO operates primarily in the Retail industry.

How many employees does OXXO have ?

OXXO employs approximately 33,919 people worldwide.

Does OXXO own any subsidiaries ?

OXXO presently has no subsidiaries across any sectors.

How many LinkedIn followers does OXXO have ?

OXXO's official LinkedIn profile has approximately 243,922 followers.

What is the NAICS classification code for OXXO ?

OXXO is classified under the NAICS code 43, which corresponds to Retail Trade.

Does OXXO have a Crunchbase profile ?

No, OXXO does not have a profile on Crunchbase.

Does OXXO have a LinkedIn profile ?

Yes, OXXO maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/oxxo.

How many cybersecurity incidents has OXXO experienced ?

As of October 1, 2026, Rankiteo reports that OXXO has not experienced any cybersecurity incidents.

How many peer or competitor companies does OXXO have ?

OXXO has an estimated 16,037 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OXXO

Boost Score +25 with badge (5 left)

803

/1000

Good

828

/1000

Good

OXXO Vendor Cyber Rating & Cyber Score

oxxo.com

Add Your Compliance Badge

Somos la cadena de tiendas de conveniencia más grande de México y América Latina, con 45 años de experiencia y más de 22 mil establecimientos ubicados a lo largo de la República Mexicana, Colombia, Perú, Chile y Brasil. En OXXO como compañía 100% mexicana y como parte de la División Proximidad de FEMSA, tenemos el objetivo de generar valor económico y social en las comunidades en las que operamos. Abrimos nuestras puertas para satisfacer las necesidades cotidianas de nuestros clientes a través de productos y servicios de calidad. Cada apertura nos permite continuar impulsando la generación de empleos, desarrollo de proveedores y contribuir a la calidad de vida de nuestros vecinos con acciones para mejorar su

OXXO

OXXO CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

OXXO Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OXXO

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for OXXO in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for OXXO in 2026.

Incident Types OXXO vs Retail Industry Avg (This Year)

No incidents recorded for OXXO in 2026.

Incident History - OXXO (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OXXO Subsidiaries

Parent Company

OXXO

Retail

Website: http://www.oxxo.com

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

OXXO Similar Companies

Lidl France

lidl.fr

Lidl s’est implanté en France en 1989. Nous avons connu une expansion très rapide qui nous a permis de devenir un acteur incontournable de la grande distribution. Lidl France, c’est aujourd’hui 45 000 collaborateurs, plus de 1 570 magasins, 25 Directions Régionales et un siège social sur 2 sites : à Strasbourg qui regroupe toutes les fonctions supports administratives (Administration RH et Formation, Finances, Informatique) et à Rungis où nous avons regroupé toutes les fonctions supports opérationnelles (Centrale d’Achats, Logistique et Supply Chain, Immobilier, Technique, Développement Commercial, Investissements, RH, Juridique et Frais Généraux). En 2012, Lidl a opéré un tournant de son histoire, avec une nouvelle aventure commerciale : rénovation des magasins, élargissement de l’offre de produit, modernisation des packagings et du merchandising en magasin ; un vrai challenge ! Aujourd’hui, acteur incontournable de la grande distribution française, LIDL s’est imposé en tant que commerce de proximité à assortiment sélectionné : nous avons augmenté nos parts de marché, nous avons su gagner la confiance de nouveaux clients et avons été élu « Meilleure chaîne de magasins » depuis plusieurs années consécutives.

SPAR South Africa

SPAR.co.za

There’s something different about shopping at SPAR, that’s because we’ve created a culture of caring and community to ensure our customers have a consistently enjoyable shopping experience in a uniquely friendly and family orientated store. Nothing means more to us than our valued customers and we believe in going the extra mile to give them the best. From sourcing the finest products to providing willing and efficient staff who take a personal interest in our customers’ needs. In the 1960’s a group made up of 8 wholesalers were given exclusive rights to the SPAR name and brand in 1963 and serviced 500 small retailers. Through business acquisitions and organic growth, today the SPAR Group Ltd operates 6 distribution centres and 1 Build it distribution centre (building materials) and 1 pharmaceutical distribution centre (S BUYS), supplying goods and services to more than 2,000 SPAR stores across Southern Africa.

Metro Inc.

cb metro.ca

With annual sales of more than $21 billion, METRO Inc. is a food and pharmacy leader in Québec and Ontario, providing employment to more than 97,000 people. Its purpose is to Nourish the health and well-being of our communities. As a retailer, franchisor, distributor, manufacturer, and provider of eCommerce services, the company operates or services a network of 995 food stores under several banners including Metro, Metro Plus, Super C, Food Basics, Adonis and Première Moisson, and some 640 pharmacies primarily under the Jean Coutu, Brunet, Metro Pharmacy and Food Basics Pharmacy banners. For more details, visit corpo.metro.ca

The TJX Companies, Inc.

tjx.com

TJX is the leading off-price apparel and home fashions retailer in the U.S. and worldwide, with four global home offices, seven brands, nearly 4,700 stores in nine countries, and five distinctive branded e-commerce sites. As Associates, we make a difference with our contributions—collaborating in delighting shoppers with hidden treasures.

Asda

asda.jobs

It’s hard for anyone to imagine just how many different career possibilities there are at Asda. Ours is a big business, and beyond the roles you might be familiar with on the shop floor (or on your doorstep), there are hundreds of others you don’t get to see. In fact, because our business is changing so rapidly, there are new roles being created at Asda all the time. Technology is changing how we do things every day, helping us to reimagine retail to make life better for our customers, in-store and online. For those with imagination, can-do, integrity and a willingness to embrace change, the possibilities at Asda are limitless. Take a look around and see where a career at Asda could take you.

Supermercados Peruanos S.A.

cb supermercadosperuanos.com.pe

Somos Supermercados Peruanos S.A. (SPSA), la cadena más grande de supermercados en Perú, orgullosos de ser 100% capital peruano y pertenecer al Grupo Intercorp. Tenemos más de 400 tiendas a nivel nacional y 4 formatos: - PlazaVea, nuestra marca líder en recordación y participación de mercado. - Vivanda, nuestra marca más fresca y cálida; - Mass, nuestro formato de hard discount, que lleva calidad al menor precio. - Makro, nuestro nuevo formato mayorista Somos apasionados, curiosos y disfrutamos todo lo que hacemos. Nos esforzamos día a día con pasión y compromiso para sorprender a nuestros clientes y colaborar con la mejora de nuestro país para tener un Perú más moderno y justo para todos. Nosotros no solo vendemos productos, impactamos directamente en la vida de los peruanos, por eso trabajamos todos los días para cumplir con nuestro propósito: "Generar bienestar para tod@s l@s peruan@s entregando calidad todos los días". Para lograrlo sabemos que nuestros colaboradores son el recurso más valioso de nuestra organización, nos preocupamos por su bienestar y crecimiento, eso nos impulsa a generar un ambiente dinámico, abierto y desafiante. Un lugar en donde nos destacamos por ser transparentes y honestos, orientados a las personas, muy eficientes y pensando siempre en los resultados, con actitud innovadora y sentido de equipo. Si tu eres así, ¿qué estas esperando?…. ¡Muestra tu talento y crece con nosotros!

Trader Joe's

traderjoes.com

Trader Joe’s is a national chain of neighborhood grocery stores. We are committed to providing our customers outstanding value in the form of the best quality products at the best everyday prices. Through our rewarding products and knowledgeable, friendly Crew Members, we have been transforming grocery shopping into a welcoming journey full of discovery and fun since 1967. At Trader Joe's, you won’t find a lot of branded items. Instead, you’ll discover a store full of unique and interesting products, along with everyday basics, in the Trader Joe's label. Our buyers travel the world searching for products we think are exceptional and will find a following among our customers. To earn a spot on our shelves, each product is submitted to a rigorous tasting panel process, in which every aspect of quality is investigated in context of the price we can offer. If a product is assessed as an outstanding value, it becomes an essential part of the Trader Joe's shopping adventure. We know that maintaining our everyday focus on value is vital, which is why we don’t have sales, we don’t offer coupons, and there are no loyalty programs or membership cards to swipe at our stores. Trader Joe’s believes every customer should have access to the best prices on the best products every day.

Kohl's

cb kohls.com

Kohl’s is a leading omnichannel retailer with more than 1,100 stores in 49 states. Kohl's business is built on a solid foundation of more than 60 million customers, an unmatched brand portfolio, industry-leading loyalty and Kohl's Card programs, a convenient and accessible nationwide store footprint, and large digital business on Kohls.com and the Kohl's mobile app.

Leroy Merlin

adeo.com

Leroy Merlin is a major player in the global DIY market. We help people around the world with all their home improvement projects, from renovations and extensions, to decoration and repairs... We offer a wide range of DIY solutions that cover plumbing, lighting, heating, electricity, sanitation, security, cooking, gardening and much more. At Leroy Merlin, we believe that people are at the heart of any business. This commitment, based on our Human First strategy, has allowed us to be regularly reward by the “Great Place to Work” Institute and "Top Employers" Institute in different countries. Adapting to local markets and promoting partnerships are key drivers for Leroy Merlin. We believe that it's only by building long-lasting relationships that we can create value for everyone: our customers, co-workers, suppliers, local markets and stakeholders.

Loading…

NEWS

OXXO CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 07:00 AM

FEMSA announces Luiz Firmino as new Global CISO.

FEMSA announced the arrival of Luiz Firmino as its new Global CISO. The executive will be responsible for "leading the group's global...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-103591

SUMMARY

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can supply a non-URL repo_url value to bypass path containment checks and read any file accessible to the API process by specifying absolute file paths.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-103590

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restriction_min_los and restriction_max_los parameters, executing arbitrary JavaScript in the victim's administrative session.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103589

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape room_num, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users to submit crafted POST requests with malicious payloads to execute arbitrary JavaScript in the victim's administrative session.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103588

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the exceptions field of the back-office Transplant a module form. Attackers can craft a malicious link containing JavaScript payload in the exceptions parameter that executes in an authenticated administrator's session when the victim follows the link.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103587

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where date_to and id_room_type parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript payload in these parameters that executes in an authenticated administrator's session when the victim follows the link.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

OXXO Vendor Cyber Rating & Cyber Score

OXXO A.I CyberSecurity Scoring

OXXO CyberSecurity News & History

OXXO Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OXXO

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OXXO vs Retail Industry Avg (This Year)

Incident History - OXXO (X = Date, Y = Severity)

OXXO Subsidiaries

Parent Company

OXXO

OXXO Similar Companies

Lidl France

SPAR South Africa

Metro Inc.

The TJX Companies, Inc.

Asda

Supermercados Peruanos S.A.

Trader Joe's

Kohl's

Leroy Merlin

OXXO CyberSecurity News

FEMSA announces Luiz Firmino as new Global CISO.

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

OXXO CyberSecurity News & History

OXXO Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OXXO

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OXXO vs Retail Industry Avg (This Year)

Incident History - OXXO (X = Date, Y = Severity)

OXXO Subsidiaries

Parent Company

OXXO

OXXO Similar Companies

Lidl France

SPAR South Africa

Metro Inc.

The TJX Companies, Inc.

Asda

Supermercados Peruanos S.A.

Trader Joe's

Kohl's

Leroy Merlin

OXXO CyberSecurity News

FEMSA announces Luiz Firmino as new Global CISO.

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo