Comparison Overview

EDP

VS

Correos

EDP

Av. 24 de Julho, nº12, Lisboa, PT, 1249 - 300
Last Update: 2026-04-01
View Profile
Between 750 and 799
http://www.edp.com

Our story began more than 40 years ago. Today we are a global company, among the largest players in the energy sector in Europe and the 4th largest producer of wind energy. We are proud to be a leading utility integrated in the Dow Jones Sustainability Indexes (World). We want to build a new energy by promoting renewable sources. To do this, we have chosen ... ... to be 100% green by 2030; ... to be Net Zero by 2040; ... to innovate, to shape the energy sector; ... empower our communities to live more sustainably. Ours is the energy that strives to create a better future, inspired by people from four regional hubs. It is the energy that knows no borders, that never sleeps, and that connects us to you. We will harness wind, sun and water to lead the energy transition. We will all be green. We choose the Earth. Welcome to the official EDP Group LinkedIn page.

NAICS: 22
NAICS Definition: Utilities
Employees: 13,888
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
2
View Profile

Correos

Calle del Conde de Peñalver, 19, Madrid, 28006, ES
Last Update: 2026-04-02
Between 750 and 799
http://www.correos.es

Somos la empresa líder en comunicaciones físicas, digitales y de paquetería. Nuestra misión es prestar un servicio integral de calidad, ofreciendo soluciones y servicios en toda la cadena de valor del ecommerce con el objetivo de facilitar la vida a nuestros clientes. Distribuimos más de 5.100 millones de envíos al año y llegamos a 19 millones de hogares y dos millones de empresas. Somos la primera empresa del país por capilaridad y cobertura territorial, con más de 10.000 puntos de acceso a nuestros servicios: 2.200 oficinas multiservicio, 100 unidades de servicios especiales 1.821 unidades de distribución y 7.676 puntos de servicio en el ámbito rural (atención al cliente y/o reparto). Y, sobre todo, somos la empresa con mayor número de personas al servicio de personas. Más de 65.000 profesionales trabajando para que Correos sea cada día una empresa más moderna, eficiente y competitiva.

NAICS: 22
NAICS Definition: Utilities
Employees: 13,714
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/edp.jpeg
EDP
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/correos.jpeg
Correos
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
EDP
100%
Compliance Rate
0/4 Standards Verified
Correos
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for EDP in 2026.

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Correos in 2026.

Incident History — EDP (X = Date, Y = Severity)

EDP cyber incidents detection timeline including parent company and subsidiaries

Incident History — Correos (X = Date, Y = Severity)

Correos cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/edp.jpeg
EDP
Incidents

Date Detected: 04/2020
Type:Ransomware
Attack Vector: Ransomware
Motivation: Financial Gain
Blog: Blog

Date Detected: 6/2015
Type:Cyber Attack
Attack Vector: Malware (DynoWiper)
Motivation: Destabilization, Cyber Warfare
Blog: Blog
https://images.rankiteo.com/companyimages/correos.jpeg
Correos
Incidents

Date Detected: 08/2022
Type:Breach
Motivation: Financial gain
Blog: Blog

FAQ

EDP company demonstrates a stronger AI Cybersecurity Score compared to Correos company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

EDP company has faced a higher number of disclosed cyber incidents historically compared to Correos company.

In the current year, Correos company and EDP company have not reported any cyber incidents.

EDP company has confirmed experiencing a ransomware attack, while Correos company has not reported such incidents publicly.

Correos company has disclosed at least one data breach, while EDP company has not reported such incidents publicly.

EDP company has reported targeted cyberattacks, while Correos company has not reported such incidents publicly.

Neither EDP company nor Correos company has reported experiencing or disclosing vulnerabilities publicly.

Neither EDP nor Correos holds any compliance certifications.

Neither company holds any compliance certifications.

EDP company has more subsidiaries worldwide compared to Correos company.

EDP company employs more people globally than Correos company, reflecting its scale as a Utilities.

Neither EDP nor Correos holds SOC 2 Type 1 certification.

Neither EDP nor Correos holds SOC 2 Type 2 certification.

Neither EDP nor Correos holds ISO 27001 certification.

Neither EDP nor Correos holds PCI DSS certification.

Neither EDP nor Correos holds HIPAA certification.

Neither EDP nor Correos holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Published
Date
2026-03-31
Updated
Date
2026-03-31
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument n_presentations leads to heap-based buffer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2026-03-31
Updated
Date
2026-03-31
Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the component MP4 File Parser. This manipulation causes heap-based buffer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2026-03-31
Updated
Date
2026-03-31
Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a heap-buffer-overflow (HBO) in icAnsiToUtf8() in the XML conversion path. The issue is triggered by a crafted ICC profile which causes icAnsiToUtf8(std::string&, char const*) to treat an input buffer as a C-string and call operations that rely on strlen()/null-termination. AddressSanitizer reports an out-of-bounds READ of size 115 past a 114-byte heap allocation, with the failure observed while running the iccToXml tool. This issue has been patched in version 2.3.1.6.

Published
Date
2026-03-31
Updated
Date
2026-03-31
Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>::GetValues() and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a 4-byte stack variable (rv) via the call chain CIccTagFixedNum::GetValues() -> CIccTagStruct::GetElemNumberValue(). This issue has been patched in version 2.3.1.6.

Published
Date
2026-03-31
Updated
Date
2026-03-31
Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References