What is the official website of ZARA ?

The official website of ZARA is https://www.zara.com/es/en/.

What is ZARA's cybersecurity risk score?

ZARA has an AI-generated cybersecurity risk score of 636 out of 1000, indicating a Poor security posture according to Rankiteo's assessment.

How many security incidents has ZARA experienced?

According to Rankiteo, ZARA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ZARA been affected by any supply chain cyber incidents ?

According to Rankiteo, ZARA has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Carnival Corporation (Incident ID: INDPITCARBASZARHAL1777466463) Anodot by Glassbox (Incident ID: ZAR1778228840)

Does ZARA have SOC 2 Type 1 certification ?

According to Rankiteo, ZARA is not certified under SOC 2 Type 1.

Does ZARA have SOC 2 Type 2 certification ?

According to Rankiteo, ZARA does not hold a SOC 2 Type 2 certification.

Does ZARA comply with GDPR ?

According to Rankiteo, ZARA is not listed as GDPR compliant.

Does ZARA have PCI DSS certification ?

According to Rankiteo, ZARA does not currently maintain PCI DSS compliance.

Does ZARA comply with HIPAA ?

According to Rankiteo, ZARA is not compliant with HIPAA regulations.

Does ZARA have ISO 27001 certification ?

According to Rankiteo,ZARA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ZARA operate in ?

ZARA operates primarily in the Retail industry.

How many employees does ZARA have ?

ZARA employs approximately 43,877 people worldwide.

Does ZARA own any subsidiaries ?

ZARA presently has no subsidiaries across any sectors.

How many LinkedIn followers does ZARA have ?

ZARA's official LinkedIn profile has approximately 632,848 followers.

What is the NAICS classification code for ZARA ?

ZARA is classified under the NAICS code 43, which corresponds to Retail Trade.

Does ZARA have a Crunchbase profile ?

No, ZARA does not have a profile on Crunchbase.

Does ZARA have a LinkedIn profile ?

Yes, ZARA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/zara.

How many cybersecurity incidents has ZARA experienced ?

As of July 30, 2026, Rankiteo reports that ZARA has experienced 4 cybersecurity incidents.

How many peer or competitor companies does ZARA have ?

ZARA has an estimated 15,932 peer or competitor companies worldwide.

What types of cybersecurity incidents has ZARA faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ZARA

Boost Score +25 with badge (5 left)

636

/1000

Poor

661

/1000

Weak

ZARA Vendor Cyber Rating & Cyber Score

zara.com

Add Your Compliance Badge

Zara is a forward-thinking force in fashion; embodying what is possible when responsibility and aspiration are accessible to all. By bringing more thoughtful style to the world, we aim to provide everyone, no matter where they are, with the inspiringly beautiful, always on-trend, responsibly crafted fashion they deserve. We are curious by nature and driven by creativity. Always moving forward, we seek more —beyond limits, beyond the expected. Among us, beauty is diverse and individual, expressed through open, kind, vibrant and outgoing personalities. This is an invitation to explore your own path with us.

ZARA A.I CyberSecurity Scoring

Scoring History

ZARA

ZARA CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

ZARA

Breach

5/2026

ZAR1780187075

ZARA

Breach

4/2026

Carnival Corpor...

INDPITCARBASZAR...

ZARA

Breach

4/2026

Anodot by Glass...

ZAR1778228840

ZARA

Breach

12/2023

ZAR1780201419

Loading…

A.I.

ZARA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ZARA

Incidents vs Retail Industry Avg (This Year)

ZARA has 61.29% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

ZARA has 191.26% more incidents than the average of all companies with at least one recorded incident.

Incident Types ZARA vs Retail Industry Avg (This Year)

ZARA reported 3 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 3 data breaches, compared to industry peers with at least 1 incident.

Incident History - ZARA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ZARA Subsidiaries

Parent Company

ZARA

Retail

Website: https://www.zara.com/es/en/

Company Size: 10,000+ employees

No subsidiary data available for this company.

Loading…

ZARA Similar Companies

The UPS Store

theupsstore.com

With more than 5,500 locally owned locations across North America, The UPS Store is the nation’s largest retail network of shipping, postal, printing and business service centers. The UPS Store, Inc., franchisor for The UPS Store locations in the U.S., is a wholly owned subsidiary of UPS. The UPS Store franchise locations offer consumers and small businesses a wide range of products and services to meet all their needs in one convenient location, including printing, packaging, shipping, mailbox services, moving supplies and other in-center services. The UPS Store has been recognized as the No. 1 Postal & Business Services franchise for 31 years straight by Entrepreneur Magazine “Franchise 500.” USA Today, G.I. Jobs recognized The UPS Store franchise as one of the 50 Top Franchises for Military Veterans. Additionally, The UPS Store franchise was named American Brand Excellence Award Winner in the Retail category by City Business Journals. The UPS Store retail ownership opportunities are available to “qualifying entrepreneurs.” The UPS Store has opportunities throughout the U.S. and Canada. Through an association with Franchise America Finance and The Bancorp Bank, The UPS Store also offers the option of national funding for qualified franchisee candidates. Be your own boss by opening a The UPS Store retail location. Learn more at https://www.theupsstorefranchise.com/

B&Q

bandqcareers.com

We are the UK’s leading home improvement and garden living retailer with over 300 stores throughout the UK and Ireland, offering great prices, with over 100,000 products available to order at diy.com for home delivery or click and collect. We launched the UK’s first home improvement marketplace in March 2022, adding additional choice for consumers. The marketplace offers a unique, integrated experience with in-store returns for many products and Click + Collect options being explored. Our team of more than 21,000 colleagues of all ages are respected nationwide for providing great home improvement help to customers. They’re the beating heart of B&Q and their iconic orange aprons are worn with pride. Every year, more than 20 million people improve their homes and make life better with B&Q, and every year the company achieves ever-higher standards for sustainable sourcing and supports our local communities, including funding B&Q Foundation grants and Shelter’s DIY Skills Advisors. For more information on our community initiatives visit diy.com/corporate/community To read our latest Build a Life project report visit diy.com/responsible-business. B&Q is part of Kingfisher plc, the international home improvement company, operating 2000 stores in 8 countries across Europe.

Lidl GB

lidlcareers.co.uk

At Lidl, we’re a pretty close bunch. Sure, we all bring something unique to the table — but when you scratch below the surface, we’ve also got a whole lot in common. We’re plate spinners and problem solvers, working hard to keep homes stocked up across the UK. Just like you. We opened the doors to our first Lidl GB store in 1994. Today, three decades later, we’re proud to have more than 1000 stores and 14 regional distribution centres filled with 34,000 exceptional colleagues across Great Britain - and we're still growing. The secret to our success? Offering the highest quality products at the lowest possible prices. A commitment to the very best service. And a group of incredible colleagues to take us forward and into the future. Our journey is moulded by you — the things that set you apart and the things that make us one amazing team. No matter your role, you’ll find that you can make your mark on our success story. We’re always looking for motivated people who are ready to make our stores, supply chains, and shopping experience the best they can be. Whoever you are, whatever your interests and wherever you come from, there’s never been a better time to join Lidl GB.

GPA

gpabr.com

We are one of the largest food retail companies in Brazil. We were pioneers with a multi-format and multi-channel business model that brings together renowned chains and brands such as Pão de Açúcar and Extra, Minuto Pão de Açúcar, Pão de Açúcar Fresh and Mini Extra. In addition to our own and exclusive brands Qualitá, Taeq and Club des Sommeliers. We have more than 765 physical stores and are leaders in food e-commerce in Brazil, working tirelessly to be the best choice for our customers and the pride of our team. We are driven by a passion to serve and win. Our people are committed to our values to offer the best shopping experience in our stores. In all areas, regardless of role or position, everyone is focused on serving and delighting our customers every day.

Yves Rocher

groupe-rocher.com

🌿 Welcome to Yves Rocher, Creator of Botanical Beauty. For 65 years, the Brand has combined botanical effectiveness and consideration of CSR issues. A pioneer in plant-based cosmetics, it is today the No.1* Beauty Brand in France, and shines in all four corners of the world. Its unique control of its value chain allows the Brand to offer a wide diversity of expertises, from plant to skin: Botanists, Harvesters, Manufacturers, Retailers, as well as all the support functions that accompany the business. Convinced of the strength of the collective, Yves Rocher relies on its 6,800 employees around the world and works every day for a more natural and more responsible beauty. Joining Yves Rocher gives sense to your job. #MakeTheChoicetoAct 🌎 Key data: More than 20 million consumers in 90 countries Around 2,300 stores worldwide, 3,500 resale points and 1,100 institutes 250 million products distributed per year 🌱 Commitments: A French and efficient cosmetic based on plants • More natural formulas limiting the use of controversial ingredients • New beauty gestures reducing plastic • Certified organic plants grown using Agroecological methods • A more sustainable sourcing of botanical ingredients • Support the activities of our farming partners • A more energy-and water-efficient cosmetics industry • A brand whose employees take care for nature • Support the actions of the Yves Rocher Foundation • Make our daily lives greener together *Kantar 2022, in volume and value.

JCPenney

cb jcpenney.com

As we reinvent ourselves to fit the diversity of America, we are looking for motivated, talented people who can emerge as Warriors in our organization. JCPenney offers an inclusive environment and culture where you can find and define yourself - your style, your purpose and your career. We know success is built from the inside out, and our associates are the heartbeat of our Company! JCPenney is now part of Catalyst Brands.

Indomaret Group

indomaretgroup.com

Originated from the idea to facilitate the provision of employees’ basic daily needs, a store, known as Indomaret, was established in 1988. As the store developed, the Company were interested to further explore and understand the consumers’ various needs and shopping behaviors. Hence, several employees were assigned to observe and examine the community’s buying behavior. It was concluded that people would rather shop in modern stores due to more choices of quality products, fixed competitive prices, as well as comfortable atmosphere. With knowledge about consumers’ needs, store management skill, community’s shifting shopping behavior towards modern outlets, came forth the desire to further serve Indonesia nationwide. This was realized when Indomaret were registered as a legal entity, PT. Indomarco Prismatama, with a vision of “becoming an excellent retail network” and emphasizing on the “easy and economical” motto. Indomaret aims to grow rapidly by expanding its business and services to satisfy its customers. The business sectors has owned up to this point are Retail (Indomaret), Grocery (Indogrosir), Shopping Plaza (BSD Plaza), Food & Beverage (Yummy Choice), Bakery (Mr. Bread & Saybread & Mr. Donut), Japanese Restaurant (Osaka Food & Washoku Sato), and IT Consultant (AGCI). In the 20th century, Indomaret Group continuously evolve throughout all the capital city of the province and globally supported by up to 100.000 high competence human resources.

Michaels Stores

michaels.com

At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at  Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise, and MakerPlace by Michaels, a dedicated handmade goods marketplace. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit www.michaels.com.

Coop

coopjobs.ch

Coop has been an integral part of Switzerland for over 150 years and acts with a sense of responsibility for its people, its regions and its ecosystems. As a retailer, wholesaler and producer, we deliver quality and are proud of our numerous brands and products. The diversity of our teams and tasks enriches us and promotes our personal development. We also approach one another in an open, interested manner, without prejudice, and we pursue ambitious goals together.

Loading…

NEWS

ZARA CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…