Comparison Overview

Woolworths Group

VS

O'Reilly Auto Parts

Woolworths Group

1 Woolworths Way, Bella Vista, NSW, AU, 2153
Last Update: 2025-12-09

Woolworths Group is one of Australia and New Zealand’s leading retail groups, supporting well-known brands such as Woolworths, Big W and Countdown. Our great team is focused on creating better experiences together, for our customers, our communities, and for each other. People are at the heart of everything we do, which is why a job with us is never just a job, it’s a chance to be part of something special, and an opportunity to grow and make a real difference, to the team you join as well as your own career path. Indeed, it’s our people who have made us one of Australia’s strongest retail groups, by working as one to power innovation and efficiency across our brands. If you’d like to become a member of one of Australia’s most experienced teams, to help us continue to grow, innovate and support our communities, we’d love to hear from you.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 57,596
Subsidiaries: 7
12-month incidents
0
Known data breaches
1
Attack type number
1

O'Reilly Auto Parts

233 S Patterson Ave, Springfield, MO, 65802, US
Last Update: 2025-12-09

O’Reilly Auto Parts started as a single store and has grown into a leading retailer in the automotive aftermarket industry with more than 6,100 locations and counting. With more than 94,000 team members, O’Reilly has expanded into 48 states, Puerto Rico, Mexico, and Canada. O’Reilly, headquartered in Springfield, Missouri, has a deep commitment to serving our customers, community, and our team members. Our culture values make O’Reilly the best place to work and grow! Whether you're interested in running a local store, managing a distribution center, or climbing the corporate ladder, O’Reilly has a career path in which you can truly thrive. Find out what it means to Live Green at our Fortune 500 Company and come work at the O! Mission: O'Reilly Automotive intends to be the dominant supplier of auto parts in our market areas by offering our retail customers, professional installers, and jobbers the best combination of price and quality provided with the highest possible service level.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 22,789
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/woolworths-group.jpeg
Woolworths Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/o'reilly-auto-parts.jpeg
O'Reilly Auto Parts
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Woolworths Group
100%
Compliance Rate
0/4 Standards Verified
O'Reilly Auto Parts
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Woolworths Group in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for O'Reilly Auto Parts in 2025.

Incident History — Woolworths Group (X = Date, Y = Severity)

Woolworths Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — O'Reilly Auto Parts (X = Date, Y = Severity)

O'Reilly Auto Parts cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/woolworths-group.jpeg
Woolworths Group
Incidents

Date Detected: 05/2015
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/o'reilly-auto-parts.jpeg
O'Reilly Auto Parts
Incidents

No Incident

FAQ

O'Reilly Auto Parts company demonstrates a stronger AI Cybersecurity Score compared to Woolworths Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Woolworths Group company has historically faced a number of disclosed cyber incidents, whereas O'Reilly Auto Parts company has not reported any.

In the current year, O'Reilly Auto Parts company and Woolworths Group company have not reported any cyber incidents.

Neither O'Reilly Auto Parts company nor Woolworths Group company has reported experiencing a ransomware attack publicly.

Woolworths Group company has disclosed at least one data breach, while the other O'Reilly Auto Parts company has not reported such incidents publicly.

Neither O'Reilly Auto Parts company nor Woolworths Group company has reported experiencing targeted cyberattacks publicly.

Neither Woolworths Group company nor O'Reilly Auto Parts company has reported experiencing or disclosing vulnerabilities publicly.

Neither Woolworths Group nor O'Reilly Auto Parts holds any compliance certifications.

Neither company holds any compliance certifications.

Woolworths Group company has more subsidiaries worldwide compared to O'Reilly Auto Parts company.

Woolworths Group company employs more people globally than O'Reilly Auto Parts company, reflecting its scale as a Retail.

Neither Woolworths Group nor O'Reilly Auto Parts holds SOC 2 Type 1 certification.

Neither Woolworths Group nor O'Reilly Auto Parts holds SOC 2 Type 2 certification.

Neither Woolworths Group nor O'Reilly Auto Parts holds ISO 27001 certification.

Neither Woolworths Group nor O'Reilly Auto Parts holds PCI DSS certification.

Neither Woolworths Group nor O'Reilly Auto Parts holds HIPAA certification.

Neither Woolworths Group nor O'Reilly Auto Parts holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N