Comparison Overview

Scholarship America

VS

YMCA of the USA

Scholarship America

7900 International Drive, Minneapolis, MN, 55425, US
Last Update: 2025-12-17
View Profile
Between 750 and 799
http://www.scholarshipamerica.org

With more than $5.4 billion distributed to more than 3.1 million students since our founding, Scholarship America is the nation's largest scholarship administrator. Our mission is to eliminate barriers to educational success so that any student can pursue their dream—and we want to partner with you to make an even bigger impact.

NAICS: 8135
NAICS Definition: Others
Employees: 364
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

YMCA of the USA

101 N. Wacker Dr, Chicago, 60606, US
Last Update: 2025-12-17
Between 750 and 799
https://www.ymca.org/

YMCA of the USA is the national resource office for the nation's YMCAs. Located in Chicago, IL, YMCA of the USA exists to serve YMCAs. To address the specific needs of communities, each YMCA is an independent organization, autonomous and separate from YMCA of the USA. They are required by the national constitution to pay annual dues, to refrain from discrimination and to support the YMCA mission. All other decisions are local choices, including programs offered, staffing and style of operation. Learn, Grow and Thrive with a Career at the Y Imagine going to work knowing that what you do each day positively affects the lives of the people in your community. Working at the Y, you'll discover more than a job-you'll enjoy a career with a future and the opportunity to make a lasting difference in the lives of those around you. Our staff members-of all ages and backgrounds and life experiences-enjoy the personal satisfaction that comes from nurturing the potential of youth and teens, improving the nation's health and well-being and providing support to our neighbors. The Y ensures that everyone has the opportunity to become healthier, more confident, connected and secure. Search for open positions at Ys across the U.S.: https://www.ymca.org/get-involved/careers/opportunities/open-positions

NAICS: 8135
NAICS Definition: Others
Employees: 35,312
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/scholarship-america.jpeg
Scholarship America
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ymcausa.jpeg
YMCA of the USA
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Scholarship America
100%
Compliance Rate
0/4 Standards Verified
YMCA of the USA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Non-profit Organizations Industry Average (This Year)

No incidents recorded for Scholarship America in 2025.

Incidents vs Non-profit Organizations Industry Average (This Year)

No incidents recorded for YMCA of the USA in 2025.

Incident History — Scholarship America (X = Date, Y = Severity)

Scholarship America cyber incidents detection timeline including parent company and subsidiaries

Incident History — YMCA of the USA (X = Date, Y = Severity)

YMCA of the USA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/scholarship-america.jpeg
Scholarship America
Incidents

Date Detected: 4/2020
Type:Data Leak
Attack Vector: Phishing/Email Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/ymcausa.jpeg
YMCA of the USA
Incidents

No Incident

FAQ

YMCA of the USA company demonstrates a stronger AI Cybersecurity Score compared to Scholarship America company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Scholarship America company has historically faced a number of disclosed cyber incidents, whereas YMCA of the USA company has not reported any.

In the current year, YMCA of the USA company and Scholarship America company have not reported any cyber incidents.

Neither YMCA of the USA company nor Scholarship America company has reported experiencing a ransomware attack publicly.

Neither YMCA of the USA company nor Scholarship America company has reported experiencing a data breach publicly.

Neither YMCA of the USA company nor Scholarship America company has reported experiencing targeted cyberattacks publicly.

Neither Scholarship America company nor YMCA of the USA company has reported experiencing or disclosing vulnerabilities publicly.

Neither Scholarship America nor YMCA of the USA holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Scholarship America company nor YMCA of the USA company has publicly disclosed detailed information about the number of their subsidiaries.

YMCA of the USA company employs more people globally than Scholarship America company, reflecting its scale as a Non-profit Organizations.

Neither Scholarship America nor YMCA of the USA holds SOC 2 Type 1 certification.

Neither Scholarship America nor YMCA of the USA holds SOC 2 Type 2 certification.

Neither Scholarship America nor YMCA of the USA holds ISO 27001 certification.

Neither Scholarship America nor YMCA of the USA holds PCI DSS certification.

Neither Scholarship America nor YMCA of the USA holds HIPAA certification.

Neither Scholarship America nor YMCA of the USA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2, Schema.load(data, many=True) is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. This issue has been patched in version 3.26.2 and 4.1.2.

Published
Date
2025-12-22
Updated
Date
2025-12-22
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
Description

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The vulnerability stems from an incorrect or insufficient path validation when loading the Service Account Token specified in spec.hashiCorpVault.credential.serviceAccount. An attacker with permissions to create or modify a TriggerAuthentication resource can exfiltrate the content of any file from the node's filesystem (where the KEDA pod resides) by directing the file's content to a server under their control, as part of the Vault authentication request. The potential impact includes the exfiltration of sensitive system information, such as secrets, keys, or the content of files like /etc/passwd. This issue has been patched in versions 2.17.3 and 2.18.3.

Published
Date
2025-12-22
Updated
Date
2025-12-22
Risk Information
cvss4
Base: 8.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Fedify's document loader. The HTML parsing regex at packages/fedify/src/runtime/docloader.ts:259 contains nested quantifiers that cause catastrophic backtracking when processing maliciously crafted HTML responses. This issue has been patched in versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2.

Published
Date
2025-12-22
Updated
Date
2025-12-22
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a theme file (e.g., home.php).

Published
Date
2025-12-22
Updated
Date
2025-12-22
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
References
Description

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

Published
Date
2025-12-22
Updated
Date
2025-12-22
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References