Comparison Overview

StubHub

VS

Instacart

StubHub

None, None, New York, NY, US, 10007
Last Update: 2025-12-01
View Profile
Between 650 and 699
http://www.stubhub.com

At StubHub, our mission is to give everyone the freedom to access and connect through live experiences. As the world's leading live event marketplace, we connect fans, sellers, and partners globally, providing access to an expansive catalog of events across more than 90 countries and territories. In 2024 alone, fans purchased over 40 million tickets from more than 1 million unique sellers on our marketplace. Operating in 33 languages and offering transactions in 48 currencies, StubHub ensures that fans everywhere can discover and attend events seamlessly, no matter their location. From sports and music to comedy, dance, festivals, and theater, we enable fans to access unforgettable experiences worldwide. Our trusted and secure platform guarantees a zero-breakage ticket-buying experience, supported by advanced pricing intelligence for fair and transparent ticketing. StubHub is redefining live entertainment through consumer-focused products, omnichannel marketing excellence, and unparalleled global selection. Ready to shape the future of live entertainment?

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 1,653
Subsidiaries: 0
12-month incidents
1
Known data breaches
1
Attack type number
1
View Profile

Instacart

Blue Shield of California Building, San Francisco, CA, 94105, US
Last Update: 2025-12-01
Between 750 and 799
https://www.instacart.com

Instacart, the leading grocery technology company in North America, works with grocers and retailers to transform how people shop. The company partners with more than 1,500 national, regional, and local retail banners to facilitate online shopping, delivery and pickup services from more than 85,000 stores across North America on the Instacart Marketplace. Instacart makes it possible for millions of people to get the groceries they need from the retailers they love, and for approximately 600,000 Instacart shoppers to earn by picking, packing and delivering orders on their own flexible schedule. The Instacart Platform offers retailers a suite of enterprise-grade technology products and services to power their e-commerce experiences, fulfill orders, digitize brick-and-mortar stores, provide advertising services, and glean insights. With Instacart Ads, thousands of CPG brands – from category leaders to emerging brands – partner with the company to connect directly with consumers online, right at the point of purchase. With Instacart Health, the company is providing tools to increase nutrition security, make healthy choices easier for consumers, and expand the role that food can play in improving health outcomes. For more information, visit www.instacart.com/company.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 21,886
Subsidiaries: 1
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/stubhub.jpeg
StubHub
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/instacart.jpeg
Instacart
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
StubHub
100%
Compliance Rate
0/4 Standards Verified
Instacart
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

StubHub has 132.56% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Instacart in 2025.

Incident History — StubHub (X = Date, Y = Severity)

StubHub cyber incidents detection timeline including parent company and subsidiaries

Incident History — Instacart (X = Date, Y = Severity)

Instacart cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/stubhub.jpeg
StubHub
Incidents

Date Detected: 3/2025
Type:Breach
Attack Vector: Backdoor
Motivation: Financial Gain
Blog: Blog
https://images.rankiteo.com/companyimages/instacart.jpeg
Instacart
Incidents

Date Detected: 07/2020
Type:Breach
Blog: Blog

FAQ

Instacart company demonstrates a stronger AI Cybersecurity Score compared to StubHub company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

StubHub and Instacart have experienced a similar number of publicly disclosed cyber incidents.

In the current year, StubHub company has reported more cyber incidents than Instacart company.

Neither Instacart company nor StubHub company has reported experiencing a ransomware attack publicly.

Both Instacart company and StubHub company have disclosed experiencing at least one data breach.

Neither Instacart company nor StubHub company has reported experiencing targeted cyberattacks publicly.

Neither StubHub company nor Instacart company has reported experiencing or disclosing vulnerabilities publicly.

Neither StubHub nor Instacart holds any compliance certifications.

Neither company holds any compliance certifications.

Instacart company has more subsidiaries worldwide compared to StubHub company.

Instacart company employs more people globally than StubHub company, reflecting its scale as a Software Development.

Neither StubHub nor Instacart holds SOC 2 Type 1 certification.

Neither StubHub nor Instacart holds SOC 2 Type 2 certification.

Neither StubHub nor Instacart holds ISO 27001 certification.

Neither StubHub nor Instacart holds PCI DSS certification.

Neither StubHub nor Instacart holds HIPAA certification.

Neither StubHub nor Instacart holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls RelinquishMagickMemory on _drawInfo->font, freeing the font string but leaving _drawInfo->font pointing to freed memory while _drawInfo->family is set to that (now-invalid) pointer. Any later cleanup or reuse of _drawInfo->font re-frees or dereferences dangling memory. DestroyDrawInfo and other setters (Options::font, Image::font) assume _drawInfo->font remains valid, so destruction or subsequent updates trigger crashes or heap corruption. This vulnerability is fixed in 7.1.2-9 and 6.9.13-34.

Published
Date
2025-12-02
Updated
Date
2025-12-02
Risk Information
cvss3
Base: 4.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
References
Description

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes (or stores in an executable location) without sufficient validation, sanitization, or execution restrictions. An authenticated remote attacker can upload a crafted PHP file and cause the application or web server to execute it, resulting in remote code execution (RCE).

Published
Date
2025-12-02
Updated
Date
2025-12-02
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References
Description

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

Published
Date
2025-12-02
Updated
Date
2025-12-02
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References
Description

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.

Published
Date
2025-12-02
Updated
Date
2025-12-02
Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries.

Published
Date
2025-12-02
Updated
Date
2025-12-02
Risk Information
cvss3
Base: 8.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References