Comparison Overview
PENNYMAC
PENNYMAC
3043 Townsgate Road, Suite 200, Westlake Village, 91361, US
Last Update: 13/07/2026
PennyMac Loan Services, LLC (NMLS #35953) is a top national mortgage lender with over 4 million lifetime customers. Whether you are new to the home loan process or an experienced buyer, Pennymac is dedicated to offering competitive rates and superior service. Being an ...
M&T Bank
345 Main St., Buffalo, 14203, US
Last Update: 22/04/2026
Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. Founded in 1856 in Buffalo, NY we are now a top 11 full-service US-based commercial bank with a retail footpr...
Compliance Ranges Comparison
PENNYMAC
M&T Bank
Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
PENNYMAC has 42.86% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Financial Services Industry Avg (This Year)
M&T Bank has 3.85% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - PENNYMAC (X = Date, Y = Severity)
PENNYMAC cyber incidents detection timeline including parent company and subsidiaries.
Incident History - M&T Bank (X = Date, Y = Severity)
M&T Bank cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
PENNYMAC
M&T Bank
FAQ
Latest Global CVEs
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.