What is the official website of Superdrug ?

The official website of Superdrug is https://http://www.superdrug.com.

What is Superdrug's cybersecurity risk score?

Superdrug has an AI-generated cybersecurity risk score of 778 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Superdrug experienced?

According to Rankiteo, Superdrug currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Superdrug been affected by any supply chain cyber incidents ?

According to Rankiteo, Superdrug has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Superdrug have SOC 2 Type 1 certification ?

According to Rankiteo, Superdrug is not certified under SOC 2 Type 1.

Does Superdrug have SOC 2 Type 2 certification ?

According to Rankiteo, Superdrug does not hold a SOC 2 Type 2 certification.

Does Superdrug comply with GDPR ?

According to Rankiteo, Superdrug is not listed as GDPR compliant.

Does Superdrug have PCI DSS certification ?

According to Rankiteo, Superdrug does not currently maintain PCI DSS compliance.

Does Superdrug comply with HIPAA ?

According to Rankiteo, Superdrug is not compliant with HIPAA regulations.

Does Superdrug have ISO 27001 certification ?

According to Rankiteo,Superdrug is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Superdrug operate in ?

Superdrug operates primarily in the Retail industry.

How many employees does Superdrug have ?

Superdrug employs approximately 8,307 people worldwide.

Does Superdrug own any subsidiaries ?

Superdrug presently has no subsidiaries across any sectors.

How many LinkedIn followers does Superdrug have ?

Superdrug's official LinkedIn profile has approximately 153,033 followers.

What is the NAICS classification code for Superdrug ?

Superdrug is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Superdrug have a Crunchbase profile ?

No, Superdrug does not have a profile on Crunchbase.

Does Superdrug have a LinkedIn profile ?

Yes, Superdrug maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/superdrug.

How many cybersecurity incidents has Superdrug experienced ?

As of July 8, 2026, Rankiteo reports that Superdrug has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Superdrug have ?

Superdrug has an estimated 15,893 peer or competitor companies worldwide.

What types of cybersecurity incidents has Superdrug faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Superdrug

Boost Score +25 with badge (5 left)

778

/1000

Fair

803

/1000

Good

Superdrug Vendor Cyber Rating & Cyber Score

superdrug.com

Add Your Compliance Badge

Our vision is to be the best in everyday accessible beauty and health. It’s our mission to be our customers first choice for up to the minute beauty and health, loved for value, choice and friendly advice, online and instore. We stock the biggest beauty and health brands, as well as exclusive brands and products that can only be found at Superdrug. We’re proud of our Own Brands, from Studio London cosmetics to B. Skin, we believe that efficacy and value can work together to deliver incredible results. Our Own Brand products are cruelty free and carry the leaping bunny logo, certified by Cruelty Free International. Our Healthcare teams deliver instore and online services to patients up and down the country. From free blood pressure

Superdrug A.I CyberSecurity Scoring

Scoring History

Superdrug

Superdrug CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Superdrug

Breach

08/2018

SUP23281122

Loading…

A.I.

Superdrug Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Superdrug

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Superdrug in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Superdrug in 2026.

Incident Types Superdrug vs Retail Industry Avg (This Year)

No incidents recorded for Superdrug in 2026.

Incident History - Superdrug (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Superdrug Subsidiaries

Superdrug

Retail

Website: https://http://www.superdrug.com

Company Size: 8,307

AS WatsonRetail

Watsons TurkeyRetail

Watsons MalaysiaRetail

Watsons PhilippinesRetail

AS Watson BeneluxRetail

KruidvatRetail

AS Watson BeneluxRetail

ICI PARIS XLRetail

AS Watson BeneluxRetail

TrekpleisterRetail

AS Watson BeneluxRetail

The Perfume ShopRetail

Watsons VietnamRetail

Watsons IndonesiaRetail

Watsons SingaporeRetail

MARIONNAUDRetail

Marionnaud ItalyRetail

Marionnaud SwitzerlandEinzelhandel: Gesundheits- und Körperpflegeprodukte

Marionnaud AustriaEinzelhandel: Gesundheits- und Körperpflegeprodukte

Marionnaud Czech RepublicMaloobchod

Watsons TaiwanRetail

Drogas ASRetail

Watsons UkraineRetail

eLab Tech @ A.S. WatsonVendita al dettaglio

AS Watson BeneluxRetail

PARKnSHOPRetail

Watsons ThailandRetail

Fortress 豐澤Retail

Loading…

Superdrug Similar Companies

RD Saúde

rdsaude.com.br

Somos a RD Saúde, um ecossistema de saúde integral, com mais de 3 mil farmácias em todo o Brasil e negócios em saúde que dividem o mesmo propósito: contribuir para uma sociedade mais saudável. Nossa jornada começou em novembro de 2011, fruto da união entre Droga Raia e Drogasil, crescendo até se tornar a maior rede de farmácias do Brasil e expandindo para além do varejo farmacêutico, integrando soluções B2B e plataformas digitais. Com mais de um milhão de vidas atendidas diariamente em todo o país, temos vocação de cuidar dos nossos clientes e das nossas pessoas. Somos um grupo comprometido em construir o futuro da saúde com tecnologia e calor humano, por meio de um ecossistema aberto de soluções em saúde. Temos a sustentabilidade no centro da nossa estratégia, dividindo nossa ambição em três pilares: pessoas, negócio e planeta mais saudáveis.

O'Reilly Auto Parts

oreillyauto.com

O’Reilly Auto Parts started as a single store and has grown into a leading retailer in the automotive aftermarket industry with more than 6,100 locations and counting. With more than 94,000 team members, O’Reilly has expanded into 48 states, Puerto Rico, Mexico, and Canada. O’Reilly, headquartered in Springfield, Missouri, has a deep commitment to serving our customers, community, and our team members. Our culture values make O’Reilly the best place to work and grow! Whether you're interested in running a local store, managing a distribution center, or climbing the corporate ladder, O’Reilly has a career path in which you can truly thrive. Find out what it means to Live Green at our Fortune 500 Company and come work at the O! Mission: O'Reilly Automotive intends to be the dominant supplier of auto parts in our market areas by offering our retail customers, professional installers, and jobbers the best combination of price and quality provided with the highest possible service level.

IKEA

ikea.com

The IKEA vision is to create a better everyday life for the many people. Our business idea is to offer well-designed, functional and affordable, high-quality home furnishing, produced with care for people and the environment. The IKEA Brand unites more than 200.000 co-workers and hundreds of companies with different owners all over the world. It’s one brand, but it reaches millions of hearts and homes. Our value chain is unique. It includes everything from product development, design, supply, manufacture and sales – and of course it begins and ends with our customers. The IKEA retail business is operated through a franchise system. Today, 12 different groups of companies market and sell the IKEA product range under franchise agreements with Inter IKEA Systems B.V. Any jobs published on this page are offered by different companies operating under the IKEA Trademark. IKEA was founded in Sweden in 1943.

Big Lots

cb biglots.com

Big Lots is an off-price retailer, offering bargains on everything for the home, including furniture, décor, pantry essentials, kitchenware, pet supplies, and more. Big Lots fulfills its mission to help customers "Live Big and Save Lots" by strategically sourcing bargains in a variety of creative ways, such as closeouts, overstocks and manufacturer liquidations.

Sprouts Farmers Market

cb sprouts.com

Sprouts is the place where goodness grows. True to its farm-stand heritage, Sprouts offers a unique grocery experience featuring an open layout with fresh produce at the heart of the store. Sprouts inspires wellness naturally with a carefully curated assortment of better-for-you products paired with purpose-driven people. The healthy grocer continues to bring the latest in wholesome, innovative products made with lifestyle-friendly ingredients such as organic, plant-based and gluten-free. Headquartered in Phoenix, and one of the fastest growing retailers in the country, Sprouts employs more than 35,000 team members and operates more than 350 stores in 23 states nationwide. To learn more about Sprouts, and the good it brings communities, visit about.sprouts.com. One thing is for sure: working at Sprouts is a lot of fun! Sounds right up your alley? All you need is a passion for people and flair for food. We can show you the rest.

Monoprix

monoprix.fr

Faire que chaque jour soit différent, étonnant, prometteur… C’est tout l’esprit du groupe Monoprix. Commerçant de centre-ville depuis 80 ans, Monoprix propose chaque jour une offre innovante et variée de produits et services partageant le même objectif : rendre le beau et le bon accessibles à tous. Avec 21 000 collaborateurs et plus de 500 magasins présents dans plus de 200 villes en France, Monoprix participe activement à l’essor économique et à la vitalité des centres-villes. A travers ses 6 enseignes dynamiques et innovantes, Monoprix a l’ambition de contribuer à la dynamique des centres-villes et de s’impliquer durablement dans la vie locale. Filiale du groupe Casino, Monoprix recrute plus de 3 000 collaborateurs chaque année pour des postes en magasin et au siège. Monoprix donne la possibilité d’évoluer dans un contexte dynamique et humain. En mettant la diversité et l’égalité des chances au premier plan de sa politique de recrutement, Monoprix s’engage à maximiser son processus de recrutement par simulation, développer la formation et la promotion interne.

Morrisons

morrisons.jobs

Our team of friendly faces works as one to provide shopping trips and a career experience you won’t find anywhere else. Together we work the Morrisons way. Constantly looking to do things even better, we work in partnership with our communities, colleagues, suppliers and British farmers to provide our customers with the freshest food at great value for money. Our people ‘Make Morrisons’. Our team spirit really is hard to beat. At the top of our game in all kinds of roles, we work as one team in our stores, distribution centres, manufacturing sites and Head office. In return for looking after our customers, we look after our people with great perks, lots of career opportunities and the training and support everyone needs to be the best they can be.

Walmart Canada

walmart.ca

Walmart Canada operates a chain of more than 400 stores nationwide serving 1.5 million customers each day. Walmart Canada's flagship online store, Walmart.ca is visited by more than 1.5 million customers daily. With more than 100,000 associates, Walmart Canada is one of Canada's largest employers and is ranked one of the country's top 10 most influential brands. Walmart Canada's extensive philanthropy program is focused on supporting Canadian families in need, and since 1994 Walmart Canada has raised and donated more than $750 million to Canadian charities. Additional information can be found at walmartcanada.ca and on Walmart Canada’s social media pages – Facebook, X, Instagram and LinkedIn.

Rumah

rumah.com.br

Fundada em Junho de 2015, a Rumah é uma loja online especializada em artigos de decoração e itens para a casa, entregando seus produtos para o Brasil inteiro. Com um portfólio grande e variado, a Rumah proporciona diversas opções para seus clientes em várias categorias. Das influências clássicas, modernas, sofisticadas às rústicas e despojadas, aliamos a funcionalidade e inovação ao conforto, praticidade e beleza para integrar espaços com mix de produtos bem pensado e sempre atento às novas tendências.

Loading…

NEWS

Superdrug CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 28, 2025 07:00 AM

M&S: WFH staff locked out of systems amid cyber attack fallout

M&S has shut remote-working employees out of some of its IT systems as it struggles to recover from the fallout of a cyberattack last week.

Read Article

August 22, 2018 07:00 AM

Superdrug targeted by hackers who claim to have 20,000 customer details

Superdrug has advised its online customers to change their passwords after the high street chain was targeted by hackers claiming to have stolen the personal...

Read Article

August 22, 2018 07:00 AM

Superdrug 'hacked' and held to ransom over personal customer data

An online hacker claims that approximately 20000 customers have been compromised, although Superdrug says it has only seen 386.

Read Article

August 22, 2018 07:00 AM

Superdrug hack highlights the lure of the retail sector for attackers

British beauty chain Superdrug has advised customers of a possible breach of personal data. The Superdrug hack is the latest in a long line...

Read Article

August 22, 2018 07:00 AM

Superdrug hack - customers warned to change passwords after details of '20,000 users stolen'

SUPERDRUG shoppers have been urged to change their passwords after a hacker claimed to have obtained the personal information of 20,000...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59705

SUMMARY

mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary user memories by accessing API routers registered without authentication middleware. Attackers can supply arbitrary user_id parameters or directly access memory retrieval endpoints to expose private memory content, or invoke pause endpoints with global_pause=true to cause denial-of-service across all users.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-59704

SUMMARY

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-55078

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no aggregate limit on total decompressed output, writing to an unbounded in-memory buffer. Exploitation requires authenticated file-upload access and the impact is limited to availability (denial of service). The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 adds a metadata preflight check that sums projected entry sizes and a streaming writer that enforces the aggregate limit during decompression. As a workaround, restrict file-upload permissions to trusted users or place a reverse proxy with request-body size limits in front of `coderd`.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-55077

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. Exploitation requires the privileged `user-admin` role so practical risk is limited to deployments that grant `user-admin` to less trusted operators. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 prevents non-owner users from resetting the password of an account that holds the `owner` role. As a workaround, restrict the `user-admin` role to trusted administrators.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-55076

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined with an unconditional email-based account fallback, this enabled account takeover. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 coerces `email_verified` across bool, string and numeric types (fail-closed) and blocks the email fallback when the matched user already has a different linked IdP subject. As a workaround, ensure the IdP returns `email_verified` as a native JSON boolean. The email-fallback linking issue has no configuration workaround; upgrading is required.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…