Comparison Overview

MC

VS

IKEA

MC

Rua João Mendonça 529, Senhora da Hora, Porto, PT, 4460-282
Last Update: 2026-04-02
View Profile
Between 750 and 799
https://mc.sonae.pt/

MC is a company from the SONAE group, and is a leader in the food retail industry in Portugal. We are a company made by all, to all. With a history of over 35 years of continuous growth, MC has a distinctive positioning in different business areas, with a vast portfolio of high quality products, services and brands. Currently, MC owns the following brands: Continente (hypermarkets), Continente Modelo (large dimension supermarkets), Continente Bom Dia (small dimension supermarkets), Continente Online (e-commerce), Meu Super (franchising small dimension supermarkets), Bagga (coffee stores and bakeries), Go Natural (bio supermarkets and restaurants), note! (books and stationery), Wells and Arenal (drugstores). With a solid and inclusive base of action, at MC we focus on people, creating value with the contribution of all. We innovate everyday, leading the way to a better tomorrow, always taking into consideration everyone's needs. Everything we are, we built together. And there's nothing more inspiring than this.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,112
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

IKEA

Olof Palmestraat 1, Delft, Zuid-Holland, NL, 2616
Last Update: 2026-04-01
Between 750 and 799
https://ikea.com/

The IKEA vision is to create a better everyday life for the many people. Our business idea is to offer well-designed, functional and affordable, high-quality home furnishing, produced with care for people and the environment. The IKEA Brand unites more than 200.000 co-workers and hundreds of companies with different owners all over the world. It’s one brand, but it reaches millions of hearts and homes. Our value chain is unique. It includes everything from product development, design, supply, manufacture and sales – and of course it begins and ends with our customers. The IKEA retail business is operated through a franchise system. Today, 12 different groups of companies market and sell the IKEA product range under franchise agreements with Inter IKEA Systems B.V. Any jobs published on this page are offered by different companies operating under the IKEA Trademark.   IKEA was founded in Sweden in 1943.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 94,730
Subsidiaries: 2
12-month incidents
0
Known data breaches
2
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/mc-sonae.jpeg
MC
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ikea.jpeg
IKEA
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
MC
100%
Compliance Rate
0/4 Standards Verified
IKEA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for MC in 2026.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for IKEA in 2026.

Incident History — MC (X = Date, Y = Severity)

MC cyber incidents detection timeline including parent company and subsidiaries

Incident History — IKEA (X = Date, Y = Severity)

IKEA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/mc-sonae.jpeg
MC
Incidents

No Incident

https://images.rankiteo.com/companyimages/ikea.jpeg
IKEA
Incidents

Date Detected: 11/2022
Type:Breach
Blog: Blog

Date Detected: 05/2022
Type:Breach
Blog: Blog

Date Detected: 11/2021
Type:Cyber Attack
Attack Vector: Phishing emails
Blog: Blog

FAQ

IKEA company demonstrates a stronger AI Cybersecurity Score compared to MC company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

IKEA company has historically faced a number of disclosed cyber incidents, whereas MC company has not reported any.

In the current year, IKEA company and MC company have not reported any cyber incidents.

Neither IKEA company nor MC company has reported experiencing a ransomware attack publicly.

IKEA company has disclosed at least one data breach, while MC company has not reported such incidents publicly.

IKEA company has reported targeted cyberattacks, while MC company has not reported such incidents publicly.

Neither MC company nor IKEA company has reported experiencing or disclosing vulnerabilities publicly.

Neither MC nor IKEA holds any compliance certifications.

Neither company holds any compliance certifications.

Both IKEA company and MC company have a similar number of subsidiaries worldwide.

IKEA company employs more people globally than MC company, reflecting its scale as a Retail.

Neither MC nor IKEA holds SOC 2 Type 1 certification.

Neither MC nor IKEA holds SOC 2 Type 2 certification.

Neither MC nor IKEA holds ISO 27001 certification.

Neither MC nor IKEA holds PCI DSS certification.

Neither MC nor IKEA holds HIPAA certification.

Neither MC nor IKEA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References