Comparison Overview
Sandoz
Sandoz
Novartis Campus, Basel, Basel-Stadt, CH, 4056
Last Update: 30/03/2026
Sandoz is the global leader in generic and biosimilar medicines. Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continu...
Eli Lilly and Company
Lilly Corporate Center, Indianapolis, Indiana, US, 46285
Last Update: 20/05/2026
We're a medicine company turning science into healing to make life better for people around the world. It all started nearly 150 years ago with a clear vision from founder Colonel Eli Lilly: "Take what you find here and make it better and better." Harnessing the power o...
Compliance Ranges Comparison
Sandoz
Eli Lilly and Company
Benchmark & Cyber Underwriting Signals
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Sandoz in 2026.
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Eli Lilly and Company in 2026.
Incident History - Sandoz (X = Date, Y = Severity)
Sandoz cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Eli Lilly and Company (X = Date, Y = Severity)
Eli Lilly and Company cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Sandoz
Eli Lilly and Company
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.