Comparison Overview

Deutsche Telekom

VS

Orange

Deutsche Telekom

Friedrich-Ebert-Allee 140, Bonn, Germany, 53113, DE
Last Update: 2025-12-09
View Profile
Between 800 and 849
https://www.telekom.com/careers

Welcome to Deutsche Telekom. As one of the world's most valuable brands, we design innovative solutions and products in the areas of connectivity, networks, digitalization and security. #connectingyourworld At Deutsche Telekom, we believe that each and every one of us has the power to move society forward. That's why we're committed to creating a culture of collaboration and innovation that everyone can participate in. We believe that diversity and inclusion are the key to creative solutions. Our employees work in 34 countries worldwide. As a leading employer, we support them with offers and benefits that enrich their work and private life. These include flexible working hours, hybrid and remote work, learning and development opportunities, health and wellbeing, as well as attractive employee benefits.

NAICS: 517
NAICS Definition: Telecommunications
Employees: 66,644
Subsidiaries: 64
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Orange

111, Quai du Président Roosevelt, None, Issy-les-Moulineaux, Île-de-France, FR, 92130
Last Update: 2025-12-11
Between 0 and 549
https://www.orange.com

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

NAICS: 517
NAICS Definition: Telecommunications
Employees: 132,461
Subsidiaries: 26
12-month incidents
3
Known data breaches
3
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/telekom.jpeg
Deutsche Telekom
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/orange.jpeg
Orange
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Deutsche Telekom
100%
Compliance Rate
0/4 Standards Verified
Orange
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Telecommunications Industry Average (This Year)

No incidents recorded for Deutsche Telekom in 2025.

Incidents vs Telecommunications Industry Average (This Year)

Orange has 294.74% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Deutsche Telekom (X = Date, Y = Severity)

Deutsche Telekom cyber incidents detection timeline including parent company and subsidiaries

Incident History — Orange (X = Date, Y = Severity)

Orange cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/telekom.jpeg
Deutsche Telekom
Incidents

No Incident

https://images.rankiteo.com/companyimages/orange.jpeg
Orange
Incidents

Date Detected: 9/2025
Type:Cyber Attack
Attack Vector: Exploitation de données personnelles volées, Ingénierie sociale, SIM swapping
Motivation: Fraude financière, Vol d'identité, Accès non autorisé à des comptes en ligne
Blog: Blog

Date Detected: 8/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 7/2025
Type:Ransomware
Attack Vector: ransomware (Warlock), system compromise
Motivation: financial gain, data theft
Blog: Blog

FAQ

Deutsche Telekom company demonstrates a stronger AI Cybersecurity Score compared to Orange company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Orange company has historically faced a number of disclosed cyber incidents, whereas Deutsche Telekom company has not reported any.

In the current year, Orange company has reported more cyber incidents than Deutsche Telekom company.

Orange company has confirmed experiencing a ransomware attack, while Deutsche Telekom company has not reported such incidents publicly.

Orange company has disclosed at least one data breach, while Deutsche Telekom company has not reported such incidents publicly.

Orange company has reported targeted cyberattacks, while Deutsche Telekom company has not reported such incidents publicly.

Neither Deutsche Telekom company nor Orange company has reported experiencing or disclosing vulnerabilities publicly.

Neither Deutsche Telekom nor Orange holds any compliance certifications.

Neither company holds any compliance certifications.

Deutsche Telekom company has more subsidiaries worldwide compared to Orange company.

Orange company employs more people globally than Deutsche Telekom company, reflecting its scale as a Telecommunications.

Neither Deutsche Telekom nor Orange holds SOC 2 Type 1 certification.

Neither Deutsche Telekom nor Orange holds SOC 2 Type 2 certification.

Neither Deutsche Telekom nor Orange holds ISO 27001 certification.

Neither Deutsche Telekom nor Orange holds PCI DSS certification.

Neither Deutsche Telekom nor Orange holds HIPAA certification.

Neither Deutsche Telekom nor Orange holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References