What is the official website of YES24 ?

The official website of YES24 is http://yes24.com.

What is YES24's cybersecurity risk score?

YES24 has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has YES24 experienced?

According to Rankiteo, YES24 currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has YES24 been affected by any supply chain cyber incidents ?

According to Rankiteo, YES24 has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does YES24 have SOC 2 Type 1 certification ?

According to Rankiteo, YES24 is not certified under SOC 2 Type 1.

Does YES24 have SOC 2 Type 2 certification ?

According to Rankiteo, YES24 does not hold a SOC 2 Type 2 certification.

Does YES24 comply with GDPR ?

According to Rankiteo, YES24 is not listed as GDPR compliant.

Does YES24 have PCI DSS certification ?

According to Rankiteo, YES24 does not currently maintain PCI DSS compliance.

Does YES24 comply with HIPAA ?

According to Rankiteo, YES24 is not compliant with HIPAA regulations.

Does YES24 have ISO 27001 certification ?

According to Rankiteo,YES24 is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does YES24 operate in ?

YES24 operates primarily in the Technology, Information and Internet industry.

How many employees does YES24 have ?

YES24 employs approximately 119 people worldwide.

Does YES24 own any subsidiaries ?

YES24 presently has no subsidiaries across any sectors.

How many LinkedIn followers does YES24 have ?

YES24's official LinkedIn profile has approximately followers.

What is the NAICS classification code for YES24 ?

YES24 is classified under the NAICS code 513, which corresponds to Others.

Does YES24 have a Crunchbase profile ?

No, YES24 does not have a profile on Crunchbase.

Does YES24 have a LinkedIn profile ?

Yes, YES24 maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/yes24.

How many cybersecurity incidents has YES24 experienced ?

As of September 6, 2026, Rankiteo reports that YES24 has experienced 2 cybersecurity incidents.

How many peer or competitor companies does YES24 have ?

YES24 has an estimated 15,315 peer or competitor companies worldwide.

What types of cybersecurity incidents has YES24 faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

YES24

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

YES24 Vendor Cyber Rating & Cyber Score

yes24.com

Add Your Compliance Badge

Online book store

YES24 A.I CyberSecurity Scoring

Scoring History

YES24

YES24 CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

YES24

Ransomware

100

6/2025

YES433061225

YES24

Ransomware

100

6/2016

YES353213509082...

Loading…

A.I.

YES24 Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for YES24

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for YES24 in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for YES24 in 2026.

Incident Types YES24 vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for YES24 in 2026.

Incident History - YES24 (X = Date, Y = Severity)

Loading…

SUBSIDIARY

YES24 Subsidiaries

Parent Company

YES24

Technology, Information and Internet

Website: http://yes24.com

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

YES24 Similar Companies

Times Internet

timesinternet.in

At Times Internet, we create premium digital products that simplify and enhance the lives of millions. As India’s largest digital products company, we have a significant presence across a wide range of categories, including News, Sports, Fintech, and Enterprise solutions. Our portfolio features market-leading and iconic brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Times Card, Indiatimes, Whatshot, Abound, Willow TV, Techgig and Times Mobile among many more. Each of these products is crafted to enrich your experiences and bring you closer to your interests and aspirations. As an equal opportunity employer, Times Internet strongly promotes inclusivity and diversity. We are proud to have achieved overall gender pay parity in 2018, verified by an independent audit conducted by Aon Hewitt. We are driven by the excitement of new possibilities and are committed to bringing innovative products, ideas, and technologies to help people make the most of every day. Join us and take us to the next level!

Sohu.com

sohu.com

Sohu.com Inc. (NASDAQ: SOHU) is China's premier online brand and indispensable to the daily life of millions of Chinese, providing a network of web properties and community based/web 2.0 products which offer the vast Sohu user community a broad array of choices regarding information, entertainment and communication. Sohu has built one of the most comprehensive matrices of Chinese language web properties and proprietary search engines, consisting of seven leading web properties.

Fanatics

fanaticsinc.com

Fanatics is committed to relentlessly enhancing the fan experience. As a leading global sports platform, Fanatics allows fans to buy, bet, and collect while engaging with sports in deeper, more immersive ways. Fanatics is redefining how fans connect with their favorite teams and players. Through its businesses—Fanatics Commerce, Fanatics Collectibles, Fanatics Betting & Gaming, Fanatics Events, Fanatics Markets, and Fanatics Studios—the company has built a powerful, integrated ecosystem. By bringing together licensed fan gear, physical and digital trading cards, live events, and more, Fanatics delivers personalized experiences to over 100 million fans worldwide. Fanatics currently holds partnerships with over 900 sports properties, including professional and college teams, leagues, players’ associations, and retail partners. Fanatics also partners with over 5,000 athletes and celebrities, including 250 exclusive partnerships, and has over 2,000 retail locations. Beyond these partnerships, Fanatics has its own powerhouse team of more than 22,000 global employees.

Taobao Marketplace

cb taobao.com

Launched in May 2003, Taobao Marketplace (www.taobao.com) is the online shopping destination of choice for Chinese consumers looking for wide selection, value and convenience. Shoppers choose from a wide range of products and services on Taobao Marketplace, which features hundreds of millions of product and service listings. Taobao Marketplace was China's largest online shopping destination in terms of gross merchandise volume in 2013, according to iResearch. In addition, the Mobile Taobao App was the most popular mobile commerce app in China from August 2012 to July 2014 in terms of mobile monthly active users, according to iResearch. Taobao Marketplace is a business within Alibaba Group.

Flipkart

flipkart.com

At Flipkart, we're driven by our purpose of empowering every Indian's dream by delivering value through innovation in technology and commerce. With a customer base of over 350 million, product coverage of over 150 million across 80+ categories, a focus on generating direct and indirect employment and a commitment to empowering generations of entrepreneurs and MSMEs, all driven by a sustainable growth strategy – Flipkart is maximising for customers, stakeholders, and the planet at large! At Flipkart, our promise to every Flipster is - getting an opportunity to leave a mark and create their own legacy, the freedom to experiment, learn and grow, work with the industry’s brightest minds as part of a diverse team and we will extend our culture of care to them to ensure that they can focus on doing their best work. Driven by audacity, bias for action, customer first, integrity and inclusion – Flipsters have pioneered solutions that have transformed digital commerce in India. From the industry-first introduction of cash-on-delivery in 2010 to the launch of voice search and multiple vernacular interfaces in 2021 that have made e-commerce a very inclusive experience, Flipkart continues the exciting journey of solving for the Indian customer. We understand that your own aspirations and journeys are unique. So you choose what you want to maximise, and we provide you the platform for it - because when you maximise, we maximise. Flipkart is a part of the Walmart-owned Flipkart Group, which also includes group companies Flipkart Wholesale, Flipkart Health+, Cleartrip, and Myntra. Get in touch with our experts for support with your orders here: https://www.flipkart.com/helpcentre

Arrow Electronics

arrow.com

Arrow Electronics (NYSE:ARW) guides innovation forward for thousands of leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that help improve business and daily life. Our broad portfolio that spans the entire technology landscape, helps customers design, distribute and deploy forward-thinking products that make the benefits of technology accessible to as many people as possible. Learn more at arrow.com. Are you thinking Five Years Out? Join us at careers.arrow.com.

YouTube

cb youtube.com

YouTube is a team-oriented, creative workplace where every single employee has a voice in the choices we make and the features we implement. We work together in small teams to design, develop, and roll out key features and products in very short time frames. Which means something you write today could be seen by millions of viewers tomorrow. And even though we’re a part of Google and enjoy all of the corporate perks, it still feels like you’re working at a startup. YouTube is headquartered in San Bruno, California, 12 miles south of San Francisco. We also have many job openings in Mountain View, and across the globe

Myntra

myntra.com

At Myntra, we don’t just follow fashion - we define it. As India's leading fashion, lifestyle, and beauty destination, we bring together the best of style, technology, and innovation to create a seamless shopping experience for our customers. With a commitment to empowering self-expression, we curate over 13,000+ brands and labels, blending global trends with India’s unique fashion pulse. Our people are at the heart of everything we do. We thrive on innovation and impact, where data-driven insights and cutting-edge technology shape the future of fashion. We encourage out-of-the-box thinking, collaboration with leaders and experts, and driving meaningful change. Myntraites have a passion for fashion - we take pride in being India's voice in fashion and in the brand we stand for. Our non-hierarchical, inclusive culture values ownership, meritocracy, and self-driven individuals who challenge the status quo and grow with every opportunity. We believe in empowering every Myntraite by providing the freedom to shape their career, fostering an environment where creativity thrives, and ensuring well-being and self-expression for all. If you thrive in a fast-paced, result-driven environment and share our passion for fashion, Myntra is the place for you. Explore opportunities: https://jobs.myntra.com/home Be The Trend. Be Myntra.

Meesho

meesho.io

Meesho is India’s e-commerce marketplace, on a mission to democratise internet commerce. Our multi-sided technology platform connects four key stakeholders — consumers, sellers, logistics partners, and content creators — to power inclusive growth at scale. We enable individuals and small businesses to sell online with ease, offering access to a wide customer base, integrated logistics, payment solutions, and platform support. For customers, Meesho offers a broad and affordable selection, tailored for diverse needs across Bharat. We also empower creators to build commerce-driven content that drives discovery and engagement. Our logistics operations are powered by Valmo, Meesho’s asset-light logistics platform that works entirely through partner-led infrastructure to ensure cost-efficient and scalable deliveries.

Loading…

NEWS

YES24 CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 04, 2025 07:00 AM

A breach every month raises doubts about South Korea’s digital defenses

Known for its blazing fast internet and home to some of the world's biggest tech giants, South Korea has also faced a string of data...

Read Article

August 19, 2025 07:00 AM

Ransomware attacks surge in South Korea, targeting YES24 and financial firms - CHOSUNBIZ

Escalating cybersecurity threats highlight the need for stronger defenses among South Korean businesses.

Read Article

August 18, 2025 07:00 AM

Welcome Financial Group lending unit suffers ransomware attack, internal documents exposed

A subsidiary of Welcome Financial Group suffered a ransomware attack that exposed internal files, following similar breaches at Yes24 and...

Read Article

August 13, 2025 07:00 AM

South Korean ticketing platform impacted by ransomware attack anew

Yes24, the leading South Korean ticketing platform and online book retailer, had its website and mobile app disrupted for seven hours...

Read Article

August 12, 2025 07:00 AM

Second ransomware attack in two months disrupts South Korean ticketing giant

Yes24, the largest ticket retailer in South Korea, faced its second ransomware attack this summer, affecting a tour for K-pop band Day6 and...

Read Article

August 11, 2025 07:00 AM

Yes24 down again after cyberattack, restored by afternoon

Yes24, the country's largest online bookseller and a major ticketing platform, experienced another cyberattack early Monday,...

Read Article

July 08, 2025 07:00 AM

Korean corporations neglect cybersecurity, need CISO authority for investments - CHOSUNBIZ

The Cybersecurity and Infrastructure Security Agency (CISA) under the Department of Homeland Security houses thousands of personnel,...

Read Article

July 03, 2025 07:00 AM

Korea lags behind in combating AI-driven cyber threats as global regulations strengthen - CHOSUNBIZ

[Editor's note] Recently, SK Telecom, YES24, the National Research Foundation of Korea (NRF), and others have suffered from cyber attacks by...

Read Article

June 30, 2025 07:00 AM

South Korea faces rising cyber threats as corporations underinvest in security systems - CHOSUNBIZ

This article examines the issues within the cybersecurity framework through domestic and international cases and seeks solutions.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86150

SUMMARY

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa_passphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-09-05

Updated

Date2026-09-05

RISK INFORMATION (Score: 4.1)

cvss2

Base Score: 3.3

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:N/A:N

cvss3

Base Score: 4.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.3

REFERENCES

CVE-2026-86149

SUMMARY

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.

Published

Date2026-09-05

Updated

Date2026-09-05

RISK INFORMATION (Score: 9.1)

cvss2

Base Score: 8.3

Complexity: LOW

AV:N/AC:L/Au:M/C:C/I:C/A:C

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-86148

SUMMARY

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

Published

Date2026-09-05

Updated

Date2026-09-05

RISK INFORMATION (Score: 9.1)

cvss2

Base Score: 8.3

Complexity: LOW

AV:N/AC:L/Au:M/C:C/I:C/A:C

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-86206

SUMMARY

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

Published

Date2026-09-05

Updated

Date2026-09-05

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-86060

SUMMARY

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)

Published

Date2026-09-05

Updated

Date2026-09-05

RISK INFORMATION (Score: )

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…