Comparison Overview

Westpac

VS

Groupe BPCE

Westpac

Head Office: 200 Barangaroo Avenue, Sydney, NSW, 2000, AU
Last Update: 2025-12-17
Between 750 and 799

From rescue helicopters and signing the Equator Principles, to paying super during parental leave and initiatives like Westpac SaferPay and SafeCall to protect customers from scams... we have a proud history of stepping up to be first for our customers, communities and people. We are Australia’s oldest bank and first company and have been supporting customers for over 200 years. Our purpose is creating better futures together – it’s what we do, who we are and why we come to work every day. With this purpose in mind, we’ve set ourselves a bold ambition - to be our customers’ #1 bank and partner through life. Through our unique portfolio of brands comprising Westpac, St.George, Bank of Melbourne, BankSA, BT and RAMS, we’re focused on meeting the financial services needs of our 13 million customers. When you join Westpac Group, you’ll be empowered to make a difference, constructively challenge and create a future worth striving for. But best of all you’ll be joining a whole organisation of people who love working together to help others create their best future. Westpac Group acknowledges the traditional owners as the custodians of this land, recognising their connection to land, waters and community. We pay our respects to Australia's First Peoples, and to their Elders, past, present and future. Westpac Banking Corporation ABN 33 007 457 141. AFSL and Australian credit licence 233714.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 15,589
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
1

Groupe BPCE

7, Promenade Germaine Sablon, Paris, 75013, FR
Last Update: 2025-12-22
Between 750 and 799

Groupe BPCE, at the service of its customers and the French economy Groupe BPCE pursues a full range of banking and insurance activities, working through its two major Banque Populaire and Caisse d’Epargne cooperative banking networks and through its different subsidiaries. Groupe BPCE, the 2nd largest banking group in France, has put down deep roots in its local markets. Its 117,000 employees serve a total of 36 million customers, 8.6 of whom have decided to become cooperative shareholders. The Group’s different subsidiaries pursue their activities in banking and insurance, tailoring their services as closely as possible to the needs of the individuals and regions they serve. With a total of 19 Banque Populaire banks, 17 Caisses d’Epargne, Natixis, Crédit Foncier, Banque Palatine, etc., Groupe BPCE offers its customers a comprehensive range of products and services: savings and investment solutions, cash management services, financing solutions, insurance, and wholesale banking services. Faithful to its status as a cooperative banking institution, the Group accompanies its customers in the realization of their different projects and develops long-lasting relationships with them, thereby contributing 20% to the drive to finance the French economy.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 45,986
Subsidiaries: 44
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/westpac.jpeg
Westpac
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bpce.jpeg
Groupe BPCE
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Westpac
100%
Compliance Rate
0/4 Standards Verified
Groupe BPCE
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Westpac in 2025.

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Groupe BPCE in 2025.

Incident History — Westpac (X = Date, Y = Severity)

Westpac cyber incidents detection timeline including parent company and subsidiaries

Incident History — Groupe BPCE (X = Date, Y = Severity)

Groupe BPCE cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/westpac.jpeg
Westpac
Incidents

Date Detected: 06/2019
Type:Data Leak
Motivation: Fraud
Blog: Blog
https://images.rankiteo.com/companyimages/bpce.jpeg
Groupe BPCE
Incidents

No Incident

FAQ

Groupe BPCE company demonstrates a stronger AI Cybersecurity Score compared to Westpac company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Westpac company has historically faced a number of disclosed cyber incidents, whereas Groupe BPCE company has not reported any.

In the current year, Groupe BPCE company and Westpac company have not reported any cyber incidents.

Neither Groupe BPCE company nor Westpac company has reported experiencing a ransomware attack publicly.

Neither Groupe BPCE company nor Westpac company has reported experiencing a data breach publicly.

Neither Groupe BPCE company nor Westpac company has reported experiencing targeted cyberattacks publicly.

Neither Westpac company nor Groupe BPCE company has reported experiencing or disclosing vulnerabilities publicly.

Neither Westpac nor Groupe BPCE holds any compliance certifications.

Neither company holds any compliance certifications.

Groupe BPCE company has more subsidiaries worldwide compared to Westpac company.

Groupe BPCE company employs more people globally than Westpac company, reflecting its scale as a Banking.

Neither Westpac nor Groupe BPCE holds SOC 2 Type 1 certification.

Neither Westpac nor Groupe BPCE holds SOC 2 Type 2 certification.

Neither Westpac nor Groupe BPCE holds ISO 27001 certification.

Neither Westpac nor Groupe BPCE holds PCI DSS certification.

Neither Westpac nor Groupe BPCE holds HIPAA certification.

Neither Westpac nor Groupe BPCE holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X