Comparison Overview

U.S. Census Bureau

VS

IBGE

U.S. Census Bureau

4600 Silver Hill Road, Washington, DC, US, 20233
Last Update: 2025-12-17
Between 750 and 799

The Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html

NAICS: 92
NAICS Definition: Public Administration
Employees: 11,969
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

IBGE

Av. Franklin Roosevelt, 166, Rio de Janeiro, 20021-120, BR
Last Update: 2025-12-18
Between 750 and 799

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

NAICS: 92
NAICS Definition: Public Administration
Employees: 12,990
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/us-census-bureau.jpeg
U.S. Census Bureau
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ibge.jpeg
IBGE
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
U.S. Census Bureau
100%
Compliance Rate
0/4 Standards Verified
IBGE
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Government Administration Industry Average (This Year)

No incidents recorded for U.S. Census Bureau in 2025.

Incidents vs Government Administration Industry Average (This Year)

No incidents recorded for IBGE in 2025.

Incident History — U.S. Census Bureau (X = Date, Y = Severity)

U.S. Census Bureau cyber incidents detection timeline including parent company and subsidiaries

Incident History — IBGE (X = Date, Y = Severity)

IBGE cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/us-census-bureau.jpeg
U.S. Census Bureau
Incidents

Date Detected: 1/2020
Type:Cyber Attack
Attack Vector: Network Intrusion
Blog: Blog
https://images.rankiteo.com/companyimages/ibge.jpeg
IBGE
Incidents

No Incident

FAQ

IBGE company demonstrates a stronger AI Cybersecurity Score compared to U.S. Census Bureau company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

U.S. Census Bureau company has historically faced a number of disclosed cyber incidents, whereas IBGE company has not reported any.

In the current year, IBGE company and U.S. Census Bureau company have not reported any cyber incidents.

Neither IBGE company nor U.S. Census Bureau company has reported experiencing a ransomware attack publicly.

Neither IBGE company nor U.S. Census Bureau company has reported experiencing a data breach publicly.

U.S. Census Bureau company has reported targeted cyberattacks, while IBGE company has not reported such incidents publicly.

Neither U.S. Census Bureau company nor IBGE company has reported experiencing or disclosing vulnerabilities publicly.

Neither U.S. Census Bureau nor IBGE holds any compliance certifications.

Neither company holds any compliance certifications.

Neither U.S. Census Bureau company nor IBGE company has publicly disclosed detailed information about the number of their subsidiaries.

IBGE company employs more people globally than U.S. Census Bureau company, reflecting its scale as a Government Administration.

Neither U.S. Census Bureau nor IBGE holds SOC 2 Type 1 certification.

Neither U.S. Census Bureau nor IBGE holds SOC 2 Type 2 certification.

Neither U.S. Census Bureau nor IBGE holds ISO 27001 certification.

Neither U.S. Census Bureau nor IBGE holds PCI DSS certification.

Neither U.S. Census Bureau nor IBGE holds HIPAA certification.

Neither U.S. Census Bureau nor IBGE holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of live queries.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

Risk Information
cvss3
Base: 4.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator.

Risk Information
cvss3
Base: 6.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N