Comparison Overview

Co-op

VS

Pick n Pay

Co-op

1 Angel Square, NOMA, Manchester, England, GB, M60 0AG
Last Update: 2025-11-27
Between 0 and 549

Owned by you. Right by you.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 20,246
Subsidiaries: 5
12-month incidents
9
Known data breaches
0
Attack type number
2

Pick n Pay

PnP Office Park, Kenilworth, Western Cape, 7708, ZA
Last Update: 2025-11-27
Between 750 and 799

Welcome to Pick n Pay, where family values and customer-centricity converge to create an unparalleled shopping experience. Since 1967, when the visionary Raymond Ackerman championed the cause of consumers by acquiring the first few stores, the Ackerman family's dedication has steered our journey of growth and expansion. Today, Pick n Pay stands tall across South Africa, Namibia, Botswana, Zambia, Mozambique, Mauritius, Swaziland, and Lesotho, embodying our commitment to serving communities far and wide. Additionally, we proudly hold a 49% share in TM Supermarkets, a Zimbabwean retail giant, further extending our reach and impact. Our core offering spans groceries, clothing, and general merchandise, tailored to meet the diverse needs of our customers. But our dedication doesn't stop there. We go beyond the ordinary, offering value-added services that align with the evolving expectations of our patrons. The Group strives to address socio-economic challenges through the supply of high-quality, affordable food for all customers, while providing significant employment and economic opportunities across its value chain. To ensure utmost convenience and accessibility, Pick n Pay operates through various store formats, including both franchised and owned establishments. Whether you step into our stores for a quick grocery run or a leisurely shopping spree, expect nothing less than a seamless and enriching experience at Pick n Pay—the quintessential family store focused on you, our valued customer.

NAICS: 452
NAICS Definition:
Employees: 26,655
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/the-co-op-group.jpeg
Co-op
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/pick-'n-pay.jpeg
Pick n Pay
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Co-op
100%
Compliance Rate
0/4 Standards Verified
Pick n Pay
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

Co-op has 2471.43% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Pick n Pay in 2025.

Incident History — Co-op (X = Date, Y = Severity)

Co-op cyber incidents detection timeline including parent company and subsidiaries

Incident History — Pick n Pay (X = Date, Y = Severity)

Pick n Pay cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/the-co-op-group.jpeg
Co-op
Incidents

Date Detected: 10/2025
Type:Ransomware
Attack Vector: third-party vulnerability, supply chain compromise
Motivation: financial gain, data exfiltration, operational disruption
Blog: Blog

Date Detected: 6/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 6/2025
Type:Cyber Attack
Motivation: Financial Gain, Data Theft
Blog: Blog
https://images.rankiteo.com/companyimages/pick-'n-pay.jpeg
Pick n Pay
Incidents

No Incident

FAQ

Pick n Pay company demonstrates a stronger AI Cybersecurity Score compared to Co-op company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Co-op company has historically faced a number of disclosed cyber incidents, whereas Pick n Pay company has not reported any.

In the current year, Co-op company has reported more cyber incidents than Pick n Pay company.

Co-op company has confirmed experiencing a ransomware attack, while Pick n Pay company has not reported such incidents publicly.

Neither Pick n Pay company nor Co-op company has reported experiencing a data breach publicly.

Co-op company has reported targeted cyberattacks, while Pick n Pay company has not reported such incidents publicly.

Neither Co-op company nor Pick n Pay company has reported experiencing or disclosing vulnerabilities publicly.

Neither Co-op nor Pick n Pay holds any compliance certifications.

Neither company holds any compliance certifications.

Co-op company has more subsidiaries worldwide compared to Pick n Pay company.

Pick n Pay company employs more people globally than Co-op company, reflecting its scale as a Retail.

Neither Co-op nor Pick n Pay holds SOC 2 Type 1 certification.

Neither Co-op nor Pick n Pay holds SOC 2 Type 2 certification.

Neither Co-op nor Pick n Pay holds ISO 27001 certification.

Neither Co-op nor Pick n Pay holds PCI DSS certification.

Neither Co-op nor Pick n Pay holds HIPAA certification.

Neither Co-op nor Pick n Pay holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Risk Information
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L