Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

SandozSandoz
VS
Bristol Myers SquibbBristol Myers Squibb
Sandoz

Sandoz

Novartis Campus, Basel, Basel-Stadt, CH, 4056

Last Update: 30/03/2026

View Profile
Between 800 and 849
https://www.sandoz.com
804/1000Good

Sandoz is the global leader in generic and biosimilar medicines. ​ ​Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continu...

NAICS:3254
NAICS Definition:Pharmaceutical and Medicine Manufacturing
Employees:17,347
Subsidiaries:22
12-month incidents
0
Known data breaches
0
Attack type number
0
Bristol Myers Squibb

Bristol Myers Squibb

3401 Princeton Pike, Lawrence Township, 08648, US

Last Update: 20/05/2026

View Profile
Between 800 and 849
http://www.bms.com
806/1000Good

At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds i...

NAICS:3254
NAICS Definition:Pharmaceutical and Medicine Manufacturing
Employees:38,258
Subsidiaries:1
12-month incidents
0
Known data breaches
0
Attack type number
2

Compliance Ranges Comparison

Based On Specific Ai Models Category
Sandoz

Sandoz

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Bristol Myers Squibb

Bristol Myers Squibb

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Sandoz in 2026.

Incidents

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Bristol Myers Squibb in 2026.

Incidents

Incident History - Sandoz (X = Date, Y = Severity)

Sandoz cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Bristol Myers Squibb (X = Date, Y = Severity)

Bristol Myers Squibb cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Sandoz

Sandoz

Incidents
No explicit notable incidents reported.
Bristol Myers Squibb

Bristol Myers Squibb

Incidents
🔒 Incident : Cyber Attack
BRI533080525
🔒 Incident : Ransomware
ERT18610523

FAQ

Between Sandoz company and Bristol Myers Squibb company, which one has the best AI Cybersecurity Score ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced more cyber incidents in the past ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced more cyber incidents this year ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced at least one ransomware attack ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced at least one data breach ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced at least one targeted cyberattack ?
Between Sandoz company and Bristol Myers Squibb company, which one has experienced at least one vulnerability ?
Between Sandoz company and Bristol Myers Squibb company, which one holds the most compliance certifications ?
Between Sandoz company and Bristol Myers Squibb company, which one holds the fewest compliance certifications ?
Between Sandoz company and Bristol Myers Squibb company, which one has the most subsidiaries ?
Between Sandoz company and Bristol Myers Squibb company, which one has the largest number of employees ?
Between Sandoz and Bristol Myers Squibb, which company holds both SOC 2 Type 1 certifications ?
Between Sandoz and Bristol Myers Squibb, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Sandoz or Bristol Myers Squibb ?
Which company is PCI DSS compliant - Sandoz or Bristol Myers Squibb ?
Between Sandoz and Bristol Myers Squibb, which company complies with HIPAA regulations for healthcare data ?
Between Sandoz and Bristol Myers Squibb, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-48579
SUMMARY

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Date2026-06-04
UPDATED
Date2026-06-04
RISK INFORMATION (Score: 9.1)
CVSS3
Base Score: 9.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
3.9
CVE-2026-48567
SUMMARY

Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-06-04
UPDATED
Date2026-06-04
RISK INFORMATION (Score: 10)
CVSS3
Base Score: 10.0
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
IMPACT SCORE
5.8
EXPLOITABILITY
3.9
CVE-2026-47655
SUMMARY

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

PUBLISHED
Date2026-06-04
UPDATED
Date2026-06-04
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
IMPACT SCORE
3.6
EXPLOITABILITY
2.8
CVE-2026-47644
SUMMARY

Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Date2026-06-04
UPDATED
Date2026-06-04
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
IMPACT SCORE
3.6
EXPLOITABILITY
2.8
CVE-2026-45497
SUMMARY

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

PUBLISHED
Date2026-06-04
UPDATED
Date2026-06-04
RISK INFORMATION (Score: 7.7)
CVSS3
Base Score: 7.7
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
IMPACT SCORE
5.3
EXPLOITABILITY
1.8