Comparison Overview

Southern Water

VS

Eskom Holdings SOC Ltd

Southern Water

Southern House, Worthing, BN13 3NX, GB
Last Update: 2026-01-25

We are one of the largest water and wastewater companies in the South East of England and thrive on the passion and hard work of more than 2,000 employees. Together we supply 532 million litres of drinking water every day to more than two million customers and treat and recycle 717 million litres of wastewater for more than four million customers in Kent, Sussex, Hampshire and the Isle of Wight. Water is essential to every aspect of our lives and we're proud to be at the heart of managing water and wastewater services. We drink it, cook with it and use it to clean. Our water supply faces big challenges - the population of the South East is growing fast, and climate change is bringing greater risk of droughts and more extreme weather. It’s a future of more people needing water and wastewater services, with less water to go around. So, together with our customers and communities, we aim to provide a sustainable, high-quality water and wastewater service that helps us create a resilient future for water in the South East. Find out more about us: Website: www.southernwater.co.uk Facebook: www.facebook.com/SouthernWater Twitter: @SouthernWater Instagram: @southernwatermedia We use market research tools to improve our service. For more info, visit: https://www.southernwater.co.uk/our-customers/privacy

NAICS: 22
NAICS Definition: Utilities
Employees: 2,707
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
2

Eskom Holdings SOC Ltd

Maxwell Drive, Sunninghill , Johannesburg, 2191, ZA
Last Update: 2026-01-25

Company profile Eskom Holdings generates, transports and distributes approximately 95% of South Africa’s electricity – making up 60% of the total electricity consumed on the African continent. Eskom is the world’s eleventh-largest power utility in terms of generating capacity, ranks ninth in terms of sales, and boasts the world's largest dry-cooling power station. Eskom Holdings’ Enterprises Division designs, builds and refurbishes Eskom’s assets, and acts as a catalyst for project development for the group. Eskom Enterprises’ main focus is to support Eskom Holdings and be the custodian of non-regulated businesses and offer strategic and commercial lifecycle services to the line divisions.

NAICS: 22
NAICS Definition: Utilities
Employees: 42,043
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/southern-water.jpeg
Southern Water
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/eskom.jpeg
Eskom Holdings SOC Ltd
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Southern Water
100%
Compliance Rate
0/4 Standards Verified
Eskom Holdings SOC Ltd
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Southern Water in 2026.

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Eskom Holdings SOC Ltd in 2026.

Incident History — Southern Water (X = Date, Y = Severity)

Southern Water cyber incidents detection timeline including parent company and subsidiaries

Incident History — Eskom Holdings SOC Ltd (X = Date, Y = Severity)

Eskom Holdings SOC Ltd cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/southern-water.jpeg
Southern Water
Incidents

Date Detected: 12/2025
Type:Cyber Attack
Attack Vector: SCADA-based industrial control systems integrated with IT systems
Motivation: Financial gain (extortion, stock manipulation)
Blog: Blog

Date Detected: 08/2020
Type:Vulnerability
Attack Vector: Insecure Direct Object References (IDOR)
Blog: Blog
https://images.rankiteo.com/companyimages/eskom.jpeg
Eskom Holdings SOC Ltd
Incidents

Date Detected: 03/2020
Type:Cyber Attack
Blog: Blog

FAQ

Eskom Holdings SOC Ltd company demonstrates a stronger AI Cybersecurity Score compared to Southern Water company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Southern Water company has faced a higher number of disclosed cyber incidents historically compared to Eskom Holdings SOC Ltd company.

In the current year, Eskom Holdings SOC Ltd company and Southern Water company have not reported any cyber incidents.

Neither Eskom Holdings SOC Ltd company nor Southern Water company has reported experiencing a ransomware attack publicly.

Neither Eskom Holdings SOC Ltd company nor Southern Water company has reported experiencing a data breach publicly.

Both Eskom Holdings SOC Ltd company and Southern Water company have reported experiencing targeted cyberattacks.

Southern Water company has disclosed at least one vulnerability, while Eskom Holdings SOC Ltd company has not reported such incidents publicly.

Neither Southern Water nor Eskom Holdings SOC Ltd holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Southern Water company nor Eskom Holdings SOC Ltd company has publicly disclosed detailed information about the number of their subsidiaries.

Eskom Holdings SOC Ltd company employs more people globally than Southern Water company, reflecting its scale as a Utilities.

Neither Southern Water nor Eskom Holdings SOC Ltd holds SOC 2 Type 1 certification.

Neither Southern Water nor Eskom Holdings SOC Ltd holds SOC 2 Type 2 certification.

Neither Southern Water nor Eskom Holdings SOC Ltd holds ISO 27001 certification.

Neither Southern Water nor Eskom Holdings SOC Ltd holds PCI DSS certification.

Neither Southern Water nor Eskom Holdings SOC Ltd holds HIPAA certification.

Neither Southern Water nor Eskom Holdings SOC Ltd holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction() function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global map engine settings.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description

The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options’ parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. NOTE: Successful exploitation of this vulnerability requires that the PDFCrowd API key is blank (also known as "demo mode", which is the default configuration when the plugin is installed) or known.

Risk Information
cvss3
Base: 6.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, with a lower-privileged role (e.g., Subscriber-level access and above), to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires an admin to grant Hustle module permissions (or module edit access) to the low-privileged user so they can access the Hustle admin page and obtain the required nonce.

Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdk_public_action AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user roles.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Risk Information
cvss3
Base: 4.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N