What is the official website of Ulta Beauty ?

The official website of Ulta Beauty is https://www.ulta.com/.

What is Ulta Beauty's cybersecurity risk score?

Ulta Beauty has an AI-generated cybersecurity risk score of 813 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Ulta Beauty experienced?

According to Rankiteo, Ulta Beauty currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ulta Beauty been affected by any supply chain cyber incidents ?

According to Rankiteo, Ulta Beauty has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ulta Beauty have SOC 2 Type 1 certification ?

According to Rankiteo, Ulta Beauty is not certified under SOC 2 Type 1.

Does Ulta Beauty have SOC 2 Type 2 certification ?

According to Rankiteo, Ulta Beauty does not hold a SOC 2 Type 2 certification.

Does Ulta Beauty comply with GDPR ?

According to Rankiteo, Ulta Beauty is not listed as GDPR compliant.

Does Ulta Beauty have PCI DSS certification ?

According to Rankiteo, Ulta Beauty does not currently maintain PCI DSS compliance.

Does Ulta Beauty comply with HIPAA ?

According to Rankiteo, Ulta Beauty is not compliant with HIPAA regulations.

Does Ulta Beauty have ISO 27001 certification ?

According to Rankiteo,Ulta Beauty is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ulta Beauty operate in ?

Ulta Beauty operates primarily in the Retail industry.

How many employees does Ulta Beauty have ?

Ulta Beauty employs approximately 38,390 people worldwide.

Does Ulta Beauty own any subsidiaries ?

Ulta Beauty presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ulta Beauty have ?

Ulta Beauty's official LinkedIn profile has approximately 611,772 followers.

What is the NAICS classification code for Ulta Beauty ?

Ulta Beauty is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Ulta Beauty have a Crunchbase profile ?

Yes, Ulta Beauty has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/ulta-beauty.

Does Ulta Beauty have a LinkedIn profile ?

Yes, Ulta Beauty maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ulta.

How many cybersecurity incidents has Ulta Beauty experienced ?

As of August 3, 2026, Rankiteo reports that Ulta Beauty has not experienced any cybersecurity incidents.

How many peer or competitor companies does Ulta Beauty have ?

Ulta Beauty has an estimated 15,942 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ulta Beauty

Boost Score +25 with badge (5 left)

813

/1000

Good

838

/1000

Good

Ulta Beauty Vendor Cyber Rating & Cyber Score

ulta.com

cb in

Add Your Compliance Badge

At Ulta Beauty (NASDAQ: ULTA), the possibilities are beautiful. Ulta Beauty is the largest U.S. beauty retailer and the premier beauty destination for cosmetics, fragrance, skin care products, hair care products and salon services. In 1990, the Company reinvented the beauty retail experience by offering a new way to shop for beauty – bringing together all things beauty, all in one place. Today, Ulta Beauty has grown to become the top national retailer offering the complete beauty experience. Ulta Beauty brings possibilities to life through the power of beauty each and every day in our stores and online with more than 25,000 products from approximately 500 well-established and emerging beauty brands across all categories and price points,

Ulta Beauty A.I CyberSecurity Scoring

Scoring History

Ulta Beauty

Ulta Beauty CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Ulta Beauty Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ulta Beauty

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Ulta Beauty in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ulta Beauty in 2026.

Incident Types Ulta Beauty vs Retail Industry Avg (This Year)

No incidents recorded for Ulta Beauty in 2026.

Incident History - Ulta Beauty (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ulta Beauty Subsidiaries

Parent Company

Ulta Beauty

Retail

Website: https://www.ulta.com/

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

Ulta Beauty Similar Companies

UNIQLO

fastretailing.com

About UNIQLO LifeWear Apparel that comes from the Japanese values of simplicity, quality, and longevity. Designed to be of the time and for the time, LifeWear is made with such modern elegance that it becomes the building blocks of each individual’s style. A perfect shirt that is always being made more perfect. The simplest design hiding the most thoughtful and modern details. The best in fit and fabric made to be affordable and accessible to all. LifeWear is clothing that is constantly being innovated, bringing more warmth, more lightness, better design, and better comfort to people’s lives. About UNIQLO and Fast Retailing UNIQLO is a brand of Fast Retailing Co., Ltd., a leading Japanese retail holding company with global headquarters in Tokyo, Japan. UNIQLO is the largest of eight brands in the Fast Retailing Group, the others being GU, Theory, PLST, Comptoir des Cotonniers, Princesse tam.tam, J Brand and Helmut Lang. With global sales of approximately 2.77 trillion yen for the 2023 fiscal year ending August 31, 2023 (US $18.92 billion, calculated in yen using the end of August 2023 rate of $1 = 146.2 yen), Fast Retailing is one of the world’s largest apparel retail companies, and UNIQLO is Japan’s leading specialty retailer. UNIQLO continues to open large-scale stores in some of the world's most important cities and locations, as part of its ongoing efforts to solidify its status as a global brand. Today the company has a total of more than 2,400 UNIQLO stores across the world, including Japan, Asia, Europe, and North America. The total number of stores across Fast Retailing's brands is now close to 3,600.

Dollar General

cb dollargeneral.com

Dollar General has been Serving Others for approximately 85 years. With approximately 20,000 stores, we serve communities across the country, from right around the corner. We exist to provide convenience, quality, and value, so our customers can get back to what's important. Our products include high-quality private labels to America's most-trusted brands. And we're here to fill more than just carts. For anyone working to create a meaningful career, a better life for themselves. their loved ones and neighbors - we're here for it. Here for What Matters.

Reliance Digital

reliancedigital.in

Reliance Digital is a Consumer Electronics, Durables, IT & Telecom retail arm of Reliance Retail Group with more than 1300+ stores across India. Reliance Digital seeks to fulfill the dream of every Indian, be it through its nationwide network of conveniently located stores or through its presence on the web, by providing a delightful shopping experience of products & solutions and helping them bring home the latest & best in technology from the widest selection at the lowest assured price with complete peace of mind through lifelong support. Products purchased from Reliance Digital are backed by Reliance ResQ, a ‘one-stop’ service centre that takes care of all your pre & post purchase service solutions regardless of the brand purchased.

Fred Meyer

fredmeyer.com

The Kroger Co., together with its subsidiaries, operates as a food retailer in the United States. The company operates three formats of supermarkets: combination food and drug stores (combo stores), multi department stores, and price impact warehouse stores or marketplace stores. The combo stores operate as food stores; and provide pharmacies, food and organic sections, general merchandise, and pet centers, as well as perishables, such as seafood and organic produce. The multi department stores offer general merchandise items, such as apparel, home fashion and furnishings, electronics, automotive, toys, and fine jewelry. The combo and multi department stores also have fuel centers. The price impact warehouse stores offer grocery, health, and beauty care items, such as meat, dairy, baked goods, and fresh produce. The Kroger Co. also manufactures and processes food for sale in its supermarkets. In addition, the company operates convenience stores, which offer an assortment of staple food items and general merchandise, as well as gasoline; and fine jewelry stores. As of August 29, 2007, it operated approximately 2,500 supermarkets and multi-department stores in 31 states; and approximately 750 convenience stores and 650 supermarket fuel centers. The Kroger Co. was founded in 1883 and is based in Cincinnati, Ohio.less

Lidl GB

lidlcareers.co.uk

At Lidl, we’re a pretty close bunch. Sure, we all bring something unique to the table — but when you scratch below the surface, we’ve also got a whole lot in common. We’re plate spinners and problem solvers, working hard to keep homes stocked up across the UK. Just like you. We opened the doors to our first Lidl GB store in 1994. Today, three decades later, we’re proud to have more than 1000 stores and 14 regional distribution centres filled with 34,000 exceptional colleagues across Great Britain - and we're still growing. The secret to our success? Offering the highest quality products at the lowest possible prices. A commitment to the very best service. And a group of incredible colleagues to take us forward and into the future. Our journey is moulded by you — the things that set you apart and the things that make us one amazing team. No matter your role, you’ll find that you can make your mark on our success story. We’re always looking for motivated people who are ready to make our stores, supply chains, and shopping experience the best they can be. Whoever you are, whatever your interests and wherever you come from, there’s never been a better time to join Lidl GB.

Asda

asda.jobs

It’s hard for anyone to imagine just how many different career possibilities there are at Asda. Ours is a big business, and beyond the roles you might be familiar with on the shop floor (or on your doorstep), there are hundreds of others you don’t get to see. In fact, because our business is changing so rapidly, there are new roles being created at Asda all the time. Technology is changing how we do things every day, helping us to reimagine retail to make life better for our customers, in-store and online. For those with imagination, can-do, integrity and a willingness to embrace change, the possibilities at Asda are limitless. Take a look around and see where a career at Asda could take you.

Carrefour

carrefour.fr

The Carrefour Group: one of the world’s leading retailers In 50 years, the Carrefour Group has become a world leader in the retail sector. The second largest retailer in the world and the largest in Europe, the Group now features four major grocery retail formats: hypermarkets, supermarkets, cash & carry and convenience stores. The Carrefour Group currently has over 9 900 company-owned and franchise stores. An international retailer A pioneer in countries such as Brazil in 1975 and China in 1995, the Group now operates on three major markets: Europe, Latin America and Asia. With a presence in more than 30 countries, it generates more than 55% of its sales outside France. A force in local economic development Everywhere it operates, the Carrefour Group demonstrates its commitment to local economic growth. Because retail involves people, it always gives priority to recruiting people who live locally, and to training its managers and staff on site. Very often, the Carrefour Group is the premier private employer in the countries in which it operates. This is obviously the case in France – where the group was founded – but it also holds true in countries such as Brazil, Argentina and Italy. At the same time, the Group gives priority to local supply chains. So 75% of all its food products come from local suppliers in the countries in which it operates.

Macy's

cb macysjobs.com

Macy's is America’s store for life. The largest retail brand of Macy's, Inc. (NYSE:M) delivers quality fashion at affordable prices to customers at approximately 640 locations in 43 states, the District of Columbia, Puerto Rico, and Guam, as well as to customers in more than 100 international destinations through leading e-commerce site macys.com. Macy's inspires fashion exploration and discovery through the most desired family of exclusive brands for her, for him, for the home, and via our dynamic mobile and social platforms. We know the power of celebration, demonstrated through decades of memorable experiences created during Macy's 4th of July Fireworks® and Macy's Thanksgiving Day Parade®, as well as spectacular fashion shows, culinary events, flower shows, and celebrity appearances. Macy's flagship stores – including New York City’s Herald Square – are internationally renowned and preeminent destinations for tourists. With the collective support of our customers and employees, Macy's builds community and helps make a difference in every market we serve, supporting local and national charities by giving nearly $50 million each year, plus 146,000 hours of volunteer service. For more than 160 years, Macy’s has, and continues to, make life shine brighter for our customers, colleagues, and communities.

Grupo Pernambucanas

pernambucanas.com.br

Somos a companhia que veste a vida dos brasileiros. O Grupo Pernambucanas é a marca que leva estilo, calor e facilidade para os brasileiros desde que nasceu. Que abre as portas para um universo de possibilidades que vão muito além das araras. É a marca que tem o olhar para a sociedade, buscando sempre gerar mudanças positivas ao redor. Seja em nossas lojas, no escritório ou em nosso centro de distribuição, estamos sempre pensando em soluções que vão melhorar a jornada de cada um.

Loading…

NEWS

Ulta Beauty CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 30, 2026 02:07 AM

ULTA SEC Filings - Ulta Beauty 10-K, 10-Q, 8-K Forms

Review Ulta Beauty, Inc. (NASDAQ: ULTA) SEC filings, including 10-K, 10-Q and 8-K reports on earnings, governance changes, severance plans...

Read Article

March 26, 2026 08:33 PM

Ulta Beauty (NASDAQ: ULTA) details growth plans, loyalty strength and risks

Ulta Beauty's 10-K describes its Unleashed growth plan, 1500+ U.S. stores, 46M loyalty members, new wellness and marketplace initiatives,...

Read Article

March 13, 2026 10:04 AM

These Stocks Are Today’s Movers: Adobe, Meta, Micron, Lennar, Coinbase, Ulta Beauty, CF Industries, and More

Adobe shares fell following the resignation of CEO Shantanu Narayen, who served in the role for nearly two decades.

Read Article

March 13, 2026 07:00 AM

Today’s Market Movers: Why Adobe, Ulta Beauty, and SentinelOne Stocks Are Falling

TLDR Adobe shares fell ~7.5% after longtime CEO Shantanu Narayen announced his resignation after 18 years Ulta Beauty dropped 8.4% on slower...

Read Article

March 12, 2026 07:00 AM

Stocks making the biggest moves after hours: Adobe, Ulta Beauty, Lennar & more

These are the stocks posting the largest moves in extended trading.

Read Article

February 24, 2026 08:00 AM

Ulta Beauty Embraces AI and Personalization at CES 2026

Ulta Beauty is showcasing a significant strategic shift at CES 2026, moving beyond its core retail operations and positioning itself as a...

Read Article

January 27, 2026 08:00 AM

Ulta Beauty angers customers as announcement quickly turns messy

Ulta Beauty, one of the most prominent beauty retailers in the U.S., has frustrated its customers as it faces increased demand and rising...

Read Article

January 25, 2026 08:00 AM

Why could no one buy an Ulta Beauty World ticket? A cybersecurity expert weighs in: ‘I waited online for over an hour’

“There was also no visible rate limiting, which means that your device or region could have limited where you were in line,” she added. “In...

Read Article

August 28, 2025 07:00 AM

Stocks making the biggest moves after hours: Ulta Beauty, Dell Technologies, Gap, Autodesk and more

These are some of the stocks posting the largest moves in extended hours trading.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…