Comparison Overview

Q: Between Wells Fargo company and First American company, which one has the best AI Cybersecurity Score ?

Wells Fargo company demonstrates a stronger AI Cybersecurity Score compared to First American company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Wells Fargo company and First American company, which one has experienced more cyber incidents in the past ?

Wells Fargo company has faced a higher number of disclosed cyber incidents historically compared to First American company.

Q: Between Wells Fargo company and First American company, which one has experienced more cyber incidents this year ?

In the current year, First American company and Wells Fargo company have not reported any cyber incidents.

Q: Between Wells Fargo company and First American company, which one has experienced at least one ransomware attack ?

Neither First American company nor Wells Fargo company has reported experiencing a ransomware attack publicly.

Q: Between Wells Fargo company and First American company, which one has experienced at least one data breach ?

Both First American company and Wells Fargo company have disclosed experiencing at least one data breach.

Q: Between Wells Fargo company and First American company, which one has experienced at least one targeted cyberattack ?

Neither First American company nor Wells Fargo company has reported experiencing targeted cyberattacks publicly.

Q: Between Wells Fargo company and First American company, which one has experienced at least one vulnerability ?

Neither Wells Fargo company nor First American company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Wells Fargo company and First American company, which one holds the most compliance certifications ?

Neither Wells Fargo nor First American holds any compliance certifications.

Q: Between Wells Fargo company and First American company, which one has the most subsidiaries ?

First American company has more subsidiaries worldwide compared to Wells Fargo company.

Wells Fargo

420 Montgomery St, San Francisco, California, US, 94103

Last Update: 2025-12-09

View Profile

Between 800 and 849

http://www.wellsfargo.com

Wells Fargo & Company (NYSE: WFC) is a diversified, community-based financial services company with approximately $1.9 trillion in assets. Wells Fargo’s vision is to satisfy our customers’ financial needs and help them succeed financially. Founded in 1852 and headquartered in San Francisco, Wells Fargo provides banking, investment and mortgage products and services, as well as consumer and commercial finance, through more than 7,300 locations, 12,000 ATMs, the internet (wellsfargo.com) and mobile banking, and has offices in over 40 countries and territories to support customers who conduct business in the global economy. With approximately 250,000 team members, Wells Fargo serves one in three households in the United States. Wells Fargo & Company was ranked No. 41 on Fortune’s 2022 rankings of America’s largest corporations. News, insights and perspectives from Wells Fargo are also available at Wells Fargo Stories. Relevant military experience is considered for veterans and transitioning service men and women. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.© 2016 Wells Fargo Bank, N.A. All rights reserved. Member FDIC.

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 212,521

Subsidiaries: 2

12-month incidents

0

Known data breaches

4

Attack type number

1

View Profile

First American

1 First American Way, None, Santa Ana, CA, US, 92707

Last Update: 2025-12-09

Between 700 and 749

http://www.firstam.com

First American Financial Corporation is a premier provider of title, settlement and risk solutions for real estate transactions. With its combination of financial strength and stability built over more than 130 years, innovative proprietary technologies, and unmatched data assets, the company is leading the digital transformation of its industry. First American also provides data products to the title industry and other third parties; valuation products and services; mortgage subservicing; home warranty products; banking, trust and wealth management services; and other related products and services. First American serves home buyers and sellers, real estate professionals, loan originators and servicers, commercial property professionals, homebuilders and others involved in residential and commercial property transactions with products and services specific to their needs. With total revenue of $9.2 billion in 2021, the company offers its products and services directly and through its agents throughout the United States and abroad.

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 15,514

Subsidiaries: 13

12-month incidents

0

Known data breaches

1

Attack type number

1

Wells Fargo

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

First American

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Wells Fargo in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for First American in 2025.

Incident History — Wells Fargo (X = Date, Y = Severity)

Wells Fargo cyber incidents detection timeline including parent company and subsidiaries

Incident History — First American (X = Date, Y = Severity)

First American cyber incidents detection timeline including parent company and subsidiaries

Wells Fargo

Incidents

Date Detected: 5/2022

Type:Breach

Attack Vector: Unauthorized Access (Insider)

Blog: Blog

Date Detected: 12/2021

Type:Breach

Attack Vector: Email

Blog: Blog

Date Detected: 11/2019

Type:Breach

Attack Vector: Human Error (Email Misdelivery)

Blog: Blog

First American

Incidents

Date Detected: 12/2023

Type:Breach

Attack Vector: Unauthorized external access

Blog: Blog

Wells Fargo company demonstrates a stronger AI Cybersecurity Score compared to First American company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Wells Fargo company has faced a higher number of disclosed cyber incidents historically compared to First American company.

In the current year, First American company and Wells Fargo company have not reported any cyber incidents.

Neither First American company nor Wells Fargo company has reported experiencing a ransomware attack publicly.

Both First American company and Wells Fargo company have disclosed experiencing at least one data breach.

Neither First American company nor Wells Fargo company has reported experiencing targeted cyberattacks publicly.

Neither Wells Fargo company nor First American company has reported experiencing or disclosing vulnerabilities publicly.

Neither Wells Fargo nor First American holds any compliance certifications.

Neither company holds any compliance certifications.

First American company has more subsidiaries worldwide compared to Wells Fargo company.

Wells Fargo company employs more people globally than First American company, reflecting its scale as a Financial Services.

Neither Wells Fargo nor First American holds SOC 2 Type 1 certification.

Neither Wells Fargo nor First American holds SOC 2 Type 2 certification.

Neither Wells Fargo nor First American holds ISO 27001 certification.

Neither Wells Fargo nor First American holds PCI DSS certification.

Neither Wells Fargo nor First American holds HIPAA certification.

Neither Wells Fargo nor First American holds GDPR certification.

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 2.6

Severity: HIGH

AV:N/AC:H/Au:N/C:N/I:P/A:N

cvss3

Base: 3.7

Severity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base: 6.3

Severity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Wells Fargo

VS

First American

Wells Fargo

First American

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Wells Fargo (X = Date, Y = Severity)

Incident History — First American (X = Date, Y = Severity)

Notable Incidents

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Wells Fargo

VS

First American

Wells Fargo

First American

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Wells Fargo (X = Date, Y = Severity)

Incident History — First American (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Breach WEL033091825

🔒 Incident : Breach WEL539072925

🔒 Incident : Breach WEL1014090725

🔒 Incident : Breach FIR713072525

FAQ

Between Wells Fargo company and First American company, which one has the best AI Cybersecurity Score ?

Between Wells Fargo company and First American company, which one has experienced more cyber incidents in the past ?

Between Wells Fargo company and First American company, which one has experienced more cyber incidents this year ?

Between Wells Fargo company and First American company, which one has experienced at least one ransomware attack ?

Between Wells Fargo company and First American company, which one has experienced at least one data breach ?

Between Wells Fargo company and First American company, which one has experienced at least one targeted cyberattack ?

Between Wells Fargo company and First American company, which one has experienced at least one vulnerability ?

Between Wells Fargo company and First American company, which one holds the most compliance certifications ?

Between Wells Fargo company and First American company, which one holds the fewest compliance certifications ?

Between Wells Fargo company and First American company, which one has the most subsidiaries ?

Between Wells Fargo company and First American company, which one has the largest number of employees ?

Between Wells Fargo and First American, which company holds both SOC 2 Type 1 certifications ?

Between Wells Fargo and First American, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Wells Fargo or First American ?

Which company is PCI DSS compliant — Wells Fargo or First American ?

Between Wells Fargo and First American, which company complies with HIPAA regulations for healthcare data ?

Between Wells Fargo and First American, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information