What is the official website of Sunwing ?

The official website of Sunwing is http://www.sunwing.ca.

What is Sunwing's cybersecurity risk score?

Sunwing has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Sunwing experienced?

According to Rankiteo, Sunwing currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Sunwing been affected by any supply chain cyber incidents ?

According to Rankiteo, Sunwing has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Sunwing have SOC 2 Type 1 certification ?

According to Rankiteo, Sunwing is not certified under SOC 2 Type 1.

Does Sunwing have SOC 2 Type 2 certification ?

According to Rankiteo, Sunwing does not hold a SOC 2 Type 2 certification.

Does Sunwing comply with GDPR ?

According to Rankiteo, Sunwing is not listed as GDPR compliant.

Does Sunwing have PCI DSS certification ?

According to Rankiteo, Sunwing does not currently maintain PCI DSS compliance.

Does Sunwing comply with HIPAA ?

According to Rankiteo, Sunwing is not compliant with HIPAA regulations.

Does Sunwing have ISO 27001 certification ?

According to Rankiteo,Sunwing is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Sunwing operate in ?

Sunwing operates primarily in the Travel Arrangements industry.

How many employees does Sunwing have ?

Sunwing employs approximately 1,059 people worldwide.

Does Sunwing own any subsidiaries ?

Sunwing presently has no subsidiaries across any sectors.

How many LinkedIn followers does Sunwing have ?

Sunwing's official LinkedIn profile has approximately 33,101 followers.

What is the NAICS classification code for Sunwing ?

Sunwing is classified under the NAICS code 5615, which corresponds to Travel Arrangement and Reservation Services.

Does Sunwing have a Crunchbase profile ?

No, Sunwing does not have a profile on Crunchbase.

Does Sunwing have a LinkedIn profile ?

Yes, Sunwing maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sunwing-vacations-group.

How many cybersecurity incidents has Sunwing experienced ?

As of July 17, 2026, Rankiteo reports that Sunwing has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Sunwing have ?

Sunwing has an estimated 5,004 peer or competitor companies worldwide.

What types of cybersecurity incidents has Sunwing faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Sunwing

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

Sunwing Vendor Cyber Rating & Cyber Score

sunwing.ca

Add Your Compliance Badge

Sunwing Vacations Group is home to North America’s largest vacation brands, comprised of the leading Canadian leisure tour operators Sunwing Vacations and WestJet Vacations, along with the growing United States tour operator Vacation Express, together with the Group’s own travel retail businesses SellOffVacations.com and Luxe Destination Weddings.

Sunwing A.I CyberSecurity Scoring

Scoring History

Sunwing

Sunwing CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Sunwing

Cyber Attack

100

04/2022

SUN23318522

Loading…

A.I.

Sunwing Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Sunwing

Incidents vs Travel Arrangements Industry Avg (This Year)

No incidents recorded for Sunwing in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sunwing in 2026.

Incident Types Sunwing vs Travel Arrangements Industry Avg (This Year)

No incidents recorded for Sunwing in 2026.

Incident History - Sunwing (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Sunwing Subsidiaries

Sunwing

Travel Arrangements

Website: http://www.sunwing.ca

Company Size: 1,059

Sunwing Airlines Inc.Airlines and Aviation

Vacation ExpressTravel Arrangements

SellOffVacations.comTravel Arrangements

LUXE Destination WeddingsEvents Services

Loading…

Sunwing Similar Companies

Norwegian Cruise Line Holdings Ltd.

nclhltd.com

Norwegian Cruise Line Holdings Ltd. (NYSE: NCLH) is a leading global cruise company which operates Norwegian Cruise Line, Oceania Cruises and Regent Seven Seas Cruises. With a combined fleet of 32 ships and approximately 66,500 berths, NCLH offers itineraries to approximately 700 destinations worldwide. NCLH expects to add 13 additional ships across its three brands through 2036, which will add approximately 41,000 berths to its fleet.

MSC Cruises

msccruises.com

Headquartered in Geneva, Switzerland, MSC Cruises is the world’s third largest cruise lines and the market leader in Europe, South America, the Middle East and Southern Africa, with a strong and growing presence in North America and the Far East. The MSC Cruises fleet consists of 23 modern ships with four new vessels due to be launched in 2026, 2027, 2029 and 2030. The Company operates in more than 100 countries around the world, offering cruises across five continents, calling at more than 240 destinations and welcoming more than 180 different nationalities on board. MSC Cruises is firmly committed to achieving net zero greenhouse gas emissions for its marine operations by 2050.

Princess Cruises

spr.ly

Princess is the world’s leading premium cruise line operating a fleet of modern ships visiting over 380 destinations around the globe on more than 160 itineraries. Each moment on Princess is one of wonderful discovery where guests can relax and explore. The choices are endless, from invigorating activities to more relaxing pursuits, and enable guests to share special moments with family and friends and enjoy unique travel experiences that create inspiring memories. At the forefront of innovation, Princess MedallionClass elevates service levels through enhanced guest experiences before and during cruise vacations. Exciting career opportunities in many departments await your discovery. Whether you are in customer service, food and beverage, or fleet operations (just to name a few), we’re certain you will find a career path at Princess Cruises that will keep you engaged and growing for years to come. Teams on shore support colleagues onboard, as together we create memorable experiences—dining, entertainment, exploration, and celebration—for our guests. Exceptional customer service is the cornerstone of our success thanks to more than 30,000 of the cruise industry’s finest team members on land and at sea. We create a friendly and welcoming environment not only for our onboard guests, but for our seagoing and land-based teams as well. The result is a remarkable number of loyal staff. We respect the seas we sail and destinations we visit. Our ships adhere to international rules regulating operations from fire safety to navigation, maritime security, and environmental stewardship. Onboard medical facilities meet or exceed standards set by the American College of Emergency Physicians. There’s no limit to how far you can go with Princess Cruises!

Europcar Mobility Group

europcar-mobility-group.com

Europcar Mobility Group is a global mobility player, with 75 years of mobility services expertise and a leading position in Europe. “We help to change the way you move” is what we stand for and brings us together. More than ever, we're committed to delivering simple, seamless, innovative solutions that make mobility easy, enjoyable and increasingly eco-friendly. To do this, we offer to individuals and businesses a wide range of car and van rental services, be it for a few hours, a few days, a week, a month or more, on-demand or on subscription, relying on a fleet of more than 250.000 vehicles, equipped with the latest engines including an increasing share of electric vehicles. Our brands address differentiated needs, use cases and expectations: Europcar® - a global leader of car rental and light commercial vehicle rental, Goldcar® - a frontrunner at providing low-cost car rental services in Europe, and Fox Rent A Car®, one of the main players in the car rental market in the US, with a "value for money" positioning. The Group also operates the "myEuropcar" platform for vehicle subscription, and "Europcar on Demand", a roundtrip car-sharing service present in key cities in Europe. Customers’ satisfaction is at the heart of the Group’s ambition and that of our more than 8,000 employees, everywhere we deliver our mobility solutions, thanks to a strong network in over 130 countries (including 16 wholly owned subsidiaries completed by franchisees and alliance partners).

Hertz

cb hertz.com

Hertz is one of the world’s largest mobility companies, and through its indirect subsidiary, The Hertz Corporation, operates the Hertz, Dollar, and Thrifty vehicle rental brands throughout North America, Europe, the Caribbean, Latin America, Africa, the Middle East, Asia, Australia, and New Zealand. Hertz pioneered the car rental industry, and the Hertz brand is one of the most recognized brands globally. For more than a century, Hertz has offered innovative, differentiated products in an effort to make every rental experience seamless and special. Customers choose Hertz for its wide selection of top-rated vehicles, for its free Hertz Gold Plus Rewards® loyalty program, and because of Hertz’s thousands of convenient locations. Hertz also operates the Firefly car rental brand and Hertz 24/7 car sharing business in international markets and additionally rents vehicles to rideshare drivers through dedicated partnerships with Uber, Lyft, and others. Hertz also sells vehicles to consumers at Hertz Car Sales locations throughout the United States.

Royal Caribbean Group

royalcaribbeangroup.com

At Royal Caribbean Group, we deliver unforgettable vacations to guests who trust us with life’s greatest moments. We build the best ships, and even better careers, all while doing the right thing. We are passionate. We are innovative. We are unstoppable. We open the world to our employees. Your journey is our journey — chart your own course. Journey with us! Our culture:   What sets the Group apart is the multicultural environment we create with employees from over 126 countries. We cultivate a workplace where employees feel they can be themselves, are appreciated because of their differences and are empowered to become part of the fabric of the Group. We have been repeatedly recognized by the Ethisphere Institute as one of the World’s Most Ethical Companies. For us, it’s a simple three-word phrase: Make good choices. Our employees have a commitment to compliance, doing the right thing and integrity. Our brands:   Royal Caribbean Group (NYSE: RCL) is a cruise vacation company comprised of three award-winning global brands: Royal Caribbean, Celebrity Cruises, and Silversea. Royal Caribbean Group is also a 50% owner of a joint venture that operates TUI Cruises and Hapag-Lloyd Cruises. Together, our brands operate a global fleet traveling to more than 800 destinations worldwide. Our promise:   We deliver the best vacation experiences, responsibly. Every one of our values and actions flows from this promise. To operate the safest ships on the seas. To protect the oceans we sail. To put people and communities first in everything we do. Link to the careers page: https://careers.royalcaribbeangroup.com/

Avis Budget Group

cb avisbudgetgroup.com

Avis Budget Group, Inc. is a leading global provider of transportation solutions, both through its Avis and Budget brands, which have more than 11,000 rental locations in approximately 180 countries around the world, and through its Zipcar brand, which is the world's leading car sharing network, with more than one million members. Avis Budget Group operates most of its car rental offices in North America, Europe and Australasia directly, and operates primarily through licensees in other parts of the world. Avis Budget Group is headquartered in Parsippany, N.J.

American Express Global Business Travel

cb amexgbt.com

Business travel doesn’t just move people from A to B, it helps ideas and innovation move forward, too. And with the most valuable marketplace, software, and services in travel, there is nowhere they can’t go with American Express Global Business Travel. With us, your Great Ideas Travel. GBT Travel Services UK Limited (GBT UK) and its authorized sublicensees (including Ovation Travel Group, Egencia and CWT) use certain trademarks and service marks of American Express Company or its subsidiaries (American Express) in the “American Express Global Business Travel” and “American Express GBT Meetings & Events” brands and in connection with its business for permitted uses only under a limited license from American Express (Licensed Marks). The Licensed Marks are trademarks or service marks of, and the property of, American Express. GBT UK is a subsidiary of Global Business Travel Group, Inc. (NYSE: GBTG). American Express holds a minority interest in GBTG, which operates as a separate company from American Express.

Costa Crociere S.p.A.

costacrociere.it

Costa belongs to the Carnival Corporation & plc Group, listed on the London and New York stock exchanges, the largest cruise company in the world. Costa, the only Italian cruise company flying the Italian flag, has been sailing the world’s seas for more than 75 years, offering its guests a different destination every day to explore via unique experiences, both on board and on land. Over 70 years of pioneering in our Industry are a great starting point. But what truly matters is what comes next. Constant evolution. New ideas and sustainable innovations. Transformations that will deliver outstanding value for Costa, our people and unparalleled experiences for all our guests. It’s an exciting journey we’re all on. What makes it possible is our unwavering ambition for excellence. Our enthusiasm, creativity and our passion. The drive to create human connections of our 17,000+ diverse multicultural global community. Together, we are empowered and driven to push ahead of the competition and redefine what excellence and success looks like for us. Each day we get a chance to live our passion and are empowered to make dreams come true – for our guests, for our communities and for ourselves. This is what unites us all, fulfils us, and makes us feel like we truly belong. Interested in joining Costa? Explore our career opportunities by visiting the Our Opportunities section on our website. If you're an early career professional or a recent graduate, discover dedicated programs and initiatives in the Costa Campus section, our gateway for young talent. For more information, feel free to contact our recruiting team at [email protected].

Loading…

NEWS

Sunwing CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 30, 2025 07:00 AM

Cybercriminal group “Scattered Spider” targeting airlines, warns FBI

A cybercriminal group has turned its focus to aviation, infiltrating the computer systems of airlines in the U.S. and Canada this month,...

Read Article

June 19, 2025 07:00 AM

Investigations ongoing for WestJet’s cybersecurity incident

CALGARY — WestJet has issued an update on its cybersecurity incident. On June 13 the airline posted an advisory about a cybersecurity...

Read Article

June 16, 2025 07:00 AM

WestJet Investigates Cyber-Attack Impacting Customers

WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has restricted access for several users.

Read Article

June 16, 2025 07:00 AM

Cybersecurity Incident Continues to Impact WestJet App and Internal Systems

The airline assures that its flight operations remain “safe and stable” are are not impacted by the situation.

Read Article

July 19, 2024 07:00 AM

Pearson Airport warns of delays as Toronto hit by global IT issue

Air travel and some hospital operations in Toronto interrupted by a worldwide IT issue on Friday are beginning to return to normal after the...

Read Article

September 06, 2022 07:00 AM

Cybersecurity in aviation: Risks and safety concerns

IATA defines aviation cybersecurity as “the convergence of people, processes, and technology that come together to protect civil aviation organizations.

Read Article

April 29, 2022 07:00 AM

Cyberattack severely delayed the airline’s flights for nearly a week

For nearly a week, Sunwing Airlines, a veteran Canadian airline, suffered severe flight delays due to a system failure caused by a cyber...

Read Article

April 23, 2022 07:00 AM

Traveller advocate hopes Sunwing lives up to compensation promises

By Chris Stoodley. Posted Apr 23, 2022 10:10:32 PM. A Halifax travel consumer advocate hopes Sunwing Airlines lives up to its promise of compensating...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44453

SUMMARY

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Denial of Service attack when calling alloca under certain conditions. When serving static files, h2o builds the file path on stack, by calling alloca. The maximum size of the memory allocated using alloca can be as huge as ~600KB, which exceeds the default pthread stack size used by musl libc (128KB). If the amount of memory allocated by alloca exceeds the stack size, the h2o server crashes with a segmentation fault, while it tries to touch the guard page. This issue has been fixed by commit 6b5370d.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44452

SUMMARY

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length SNI extension, the h2o server runs over the zero-length hostname while trying to copy the hostname, assuming that it is NULL-terminated. This is a potential denial-of-service attack vector in sense that it might trigger segmentation violation. This issue has been fixed by commit 8dc37cb.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-44436

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC version 1 further restricts the maximum to 20 bytes. Quicly implements QUIC version 1 and therefore its CID buffers are limited to 20 bytes. However, to be able to respond to unknown versions of QUIC, its packet decoder accepts Connection IDs of up to 255 bytes. As its CID buffers are merely 20 bytes long, Quicly must reject QUIC version 1 packets with Connection IDs longer than that. The command line tool bundled with Quicly has had that check, however the library itself lacked such enforcement. As a consequence, when used by applications that lack their own enforcement, the connection state becoming inconsistent to buffer overrun. Fortunately, the overflow stops within the allocated chunk of memory, but nevertheless, the bug leads to assertion failures. This issue has been fixed by commit 8b178e6.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44435

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB, causing a Denial of Service. This issue has been fixed by commit 937d0e9.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44434

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dccf5d4, Quicly was vulnerable to stateless reset injection through lack of packet entry validation. The QUIC protocol is designed to withstand packet injection attacks, once the handshake is complete. Only packets that carry some secret patterns are considered as stateless resets. Quicly allows the peer to share up to 4 such patterns per connection. However, until now, it failed to determine which of the 4 slots that it uses to retain the secret patterns contains a valid entry. As the slots are zero-initialized, the failure meant that, unless the peer advertised 4 of such patterns, an all-zero pattern was treated as a stateless reset.In effect, this allowed an on-path attacker to reset QUIC connections governed by Quicly. This issue has been fixed by commit dccf5d4.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…