Comparison Overview

Woolworths Supermarkets

VS

Mr Price Group

Woolworths Supermarkets

1 Woolworths Way, Bella Vista, NSW, AU, 2153
Last Update: 2025-11-25
Between 750 and 799

There are over 128,000 of us across Australia. We’re in the biggest cities and the tiniest towns. We’re meal creators and digital developers. Number crunchers and fresh food deliverers. Yes, we all have many skills and wear many hats. But we’re all the same team, because we’re all Fresh Food People. Every day here is exciting and different. Our focus will always be food, but we’re also committed to making a positive difference to our customers and community. When you join us, you’ll be part of a team leading the way in innovation and fresh ideas that can change people’s lives. WHY SHOULD YOU PICK WOOLWORTHS? With us, a job is never just a job. It’s a place where you can develop your career, gain life experience and make a tangible difference. Build a brilliant retail career as you work alongside some of the best minds in the business. Our promise to you: - If you’ve got goals, we’ve got all you need to succeed. Being part of the Woolworths Group – which includes Big W, BWS, Dan Murphy’s, Cellarmasters, ALH Group and Countdown (NZ) – means you won’t have one opportunity with us, you’ll have thousands. - We’re a team that’s there for each other. You’ll find the encouragement and support to make the most of whatever comes your way. By working alongside so many talented people, you’ll also discover so much more about yourself, and grow as a person. - Join us and you’ll be doing a little good every day. It can be something as small as making a customer smile, or bigger like supporting Australian farmers and reducing food waste. Whatever it is, it’s about our commitment to helping all Australians live and eat better. So, if you want to be an important part of something truly special, and proudly Australian – we want to hear from you. The Fresh Food People.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 24,835
Subsidiaries: 7
12-month incidents
0
Known data breaches
1
Attack type number
1

Mr Price Group

65 NMR Avenue, Durban, KwaZulu Natal, 4001, ZA
Last Update: 2025-11-20
Between 750 and 799

Mr Price Group Limited is an omni-channel, fashion value retailer. The Group retails Apparel, Homeware and Sportsware and is one of the fastest growing retailers in South Africa. Our History: 1885 - The first John Orrs store opens 1934 - The first Hub store opens 1952 - John Orrs is listed on the JSE 1967 - Acquisition of two Miladys stores 1986 - Laurie Chiappini and Stewart Cohen, together with BOE, acquire a major shareholding in John Orr Holdings 1987 - The first Mr Price store opens 1991 - Laurie Chiappini and Stewart Cohen acquire control of the Group from BOE 1993 - Launch of the Mr Price Group Share Partnership Initiative 1996 - Acquisition of Galaxy & Co. and Sheet Street 1997 - Alastair McArthur is appointed as CEO 1998 - Mr Price Home launched 2000 - Mr Price opens stores in Botswana and Namibia 2001 - Specialty Stores becomes MR Price Group 2005 - Over 100 million units are sold across the group 2006 - Sale of the Hub and Galaxy divisions 2007 - Launch of Mr Price Sport stores and Mr Price Franchising 2008 - Miladys wins the Orange Index award for excellence in customer service 2008 - Mr Price Apparel is voted the most loved and most frequented retail apparel brand for the first time 2008 - This year Mr Price Home is voted the most loved and most frequented homeware retailer 2011 - Retail sales exceed R10 billion and profit attributable to shareholders exceeds R1 billion for the first time 2011 - The group celebrates the 25th anniversary of change in control, recording a CAGR share of 25.3% and headline earnings per share of 23.5% over this period 2012 - First Corporate owned Mr Price store opens in Lagos, Nigeria 2013 - Mr Price launches its online store

NAICS: 43
NAICS Definition: Retail Trade
Employees: 16,924
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/woolworths-supermarkets.jpeg
Woolworths Supermarkets
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/mr-price-group.jpeg
Mr Price Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Woolworths Supermarkets
100%
Compliance Rate
0/4 Standards Verified
Mr Price Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Woolworths Supermarkets in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Mr Price Group in 2025.

Incident History — Woolworths Supermarkets (X = Date, Y = Severity)

Woolworths Supermarkets cyber incidents detection timeline including parent company and subsidiaries

Incident History — Mr Price Group (X = Date, Y = Severity)

Mr Price Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/woolworths-supermarkets.jpeg
Woolworths Supermarkets
Incidents

Date Detected: 05/2015
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/mr-price-group.jpeg
Mr Price Group
Incidents

No Incident

FAQ

Woolworths Supermarkets company demonstrates a stronger AI Cybersecurity Score compared to Mr Price Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Woolworths Supermarkets company has historically faced a number of disclosed cyber incidents, whereas Mr Price Group company has not reported any.

In the current year, Mr Price Group company and Woolworths Supermarkets company have not reported any cyber incidents.

Neither Mr Price Group company nor Woolworths Supermarkets company has reported experiencing a ransomware attack publicly.

Woolworths Supermarkets company has disclosed at least one data breach, while the other Mr Price Group company has not reported such incidents publicly.

Neither Mr Price Group company nor Woolworths Supermarkets company has reported experiencing targeted cyberattacks publicly.

Neither Woolworths Supermarkets company nor Mr Price Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Woolworths Supermarkets nor Mr Price Group holds any compliance certifications.

Neither company holds any compliance certifications.

Woolworths Supermarkets company has more subsidiaries worldwide compared to Mr Price Group company.

Woolworths Supermarkets company employs more people globally than Mr Price Group company, reflecting its scale as a Retail.

Neither Woolworths Supermarkets nor Mr Price Group holds SOC 2 Type 1 certification.

Neither Woolworths Supermarkets nor Mr Price Group holds SOC 2 Type 2 certification.

Neither Woolworths Supermarkets nor Mr Price Group holds ISO 27001 certification.

Neither Woolworths Supermarkets nor Mr Price Group holds PCI DSS certification.

Neither Woolworths Supermarkets nor Mr Price Group holds HIPAA certification.

Neither Woolworths Supermarkets nor Mr Price Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H