Comparison Overview

Moody's Corporation

250 Greenwich Street, New York, New York, US, 10007

Last Update: 2026-04-01

Between 750 and 799

http://www.moodys.com

In a world shaped by increasingly interconnected risks, Moody’s helps customers develop a holistic view of these risks to advance their business and act decisively. With a rich history of expertise in global markets and a diverse workforce in more than 40 countries, Moody’s unites the brightest minds to turn today’s risks into tomorrow’s opportunities.

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 15,041

Subsidiaries: 14

12-month incidents

0

Known data breaches

0

Attack type number

0

View Profile

SMBC Group

1丁目 1-2, Marunouchi Chiyoda-Ku,, Tokyo, JP

Last Update: 2026-03-29

Between 800 and 849

http://www.smfg.co.jp/english/

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 150 offices and 120,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo and Nagoya stock exchanges, and its ADRs trade on the New York Stock Exchange (NYSE: SMFG). Americas: https://www.smbcgroup.com/ EMEA: https://www.smbcgroup.com/emea/ APAC: https://www.smbc.co.jp/asia/ Tokyo: https://www.smfg.co.jp/english/

NAICS: 52

NAICS Definition: Finance and Insurance

Employees: 14,322

Subsidiaries: 2

12-month incidents

0

Known data breaches

0

Attack type number

0

Moody's Corporation

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

https://images.rankiteo.com/companyimages/sumitomo-mitsui-banking-corporation.jpeg

SMBC Group

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Moody's Corporation in 2026.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for SMBC Group in 2026.

Incident History — Moody's Corporation (X = Date, Y = Severity)

Moody's Corporation cyber incidents detection timeline including parent company and subsidiaries

Incident History — SMBC Group (X = Date, Y = Severity)

SMBC Group cyber incidents detection timeline including parent company and subsidiaries

Moody's Corporation

Incidents

No Incident

SMBC Group

Incidents

No Incident

SMBC Group company demonstrates a stronger AI Cybersecurity Score compared to Moody's Corporation company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, SMBC Group company has disclosed a higher number of cyber incidents compared to Moody's Corporation company.

In the current year, SMBC Group company and Moody's Corporation company have not reported any cyber incidents.

Neither SMBC Group company nor Moody's Corporation company has reported experiencing a ransomware attack publicly.

Neither SMBC Group company nor Moody's Corporation company has reported experiencing a data breach publicly.

Neither SMBC Group company nor Moody's Corporation company has reported experiencing targeted cyberattacks publicly.

Neither Moody's Corporation company nor SMBC Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Moody's Corporation nor SMBC Group holds any compliance certifications.

Neither company holds any compliance certifications.

Moody's Corporation company has more subsidiaries worldwide compared to SMBC Group company.

Moody's Corporation company employs more people globally than SMBC Group company, reflecting its scale as a Financial Services.

Neither Moody's Corporation nor SMBC Group holds SOC 2 Type 1 certification.

Neither Moody's Corporation nor SMBC Group holds SOC 2 Type 2 certification.

Neither Moody's Corporation nor SMBC Group holds ISO 27001 certification.

Neither Moody's Corporation nor SMBC Group holds PCI DSS certification.

Neither Moody's Corporation nor SMBC Group holds HIPAA certification.

Neither Moody's Corporation nor SMBC Group holds GDPR certification.

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date

2026-04-01

Updated

Date

2026-04-01

Risk Information

cvss2

Base: 5.0

Severity: LOW

AV:N/AC:L/Au:N/C:N/I:N/A:P

cvss3

Base: 4.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

cvss4

Base: 5.3

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published

Date

2026-04-01

Updated

Date

2026-04-01

Risk Information

cvss3

Base: 7.8

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base: 8.4

Severity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Published

Date

2026-04-01

Updated

Date

2026-04-01

Risk Information

cvss3

Base: 7.8

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base: 8.4

Severity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published

Date

2026-04-01

Updated

Date

2026-04-01

Risk Information

cvss3

Base: 7.8

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base: 8.4

Severity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published

Date

2026-04-01

Updated

Date

2026-04-01

Risk Information

cvss3

Base: 7.8

Severity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base: 8.4

Severity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Moody's Corporation

VS

SMBC Group

Moody's Corporation

SMBC Group

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Moody's Corporation (X = Date, Y = Severity)

Incident History — SMBC Group (X = Date, Y = Severity)

Notable Incidents

No Incident

No Incident

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2026-5314

Risk Information

CVE-2026-32929

Risk Information

CVE-2026-32928

Risk Information

CVE-2026-32927

Risk Information

CVE-2026-32926

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Moody's Corporation

VS

SMBC Group

Moody's Corporation

SMBC Group

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Incidents vs Financial Services Industry Average (This Year)

Incident History — Moody's Corporation (X = Date, Y = Severity)

Incident History — SMBC Group (X = Date, Y = Severity)

Notable Incidents

No Incident

No Incident

FAQ

Between Moody's Corporation company and SMBC Group company, which one has the best AI Cybersecurity Score ?

Between Moody's Corporation company and SMBC Group company, which one has experienced more cyber incidents in the past ?

Between Moody's Corporation company and SMBC Group company, which one has experienced more cyber incidents this year ?

Between Moody's Corporation company and SMBC Group company, which one has experienced at least one ransomware attack ?

Between Moody's Corporation company and SMBC Group company, which one has experienced at least one data breach ?

Between Moody's Corporation company and SMBC Group company, which one has experienced at least one targeted cyberattack ?

Between Moody's Corporation company and SMBC Group company, which one has experienced at least one vulnerability ?

Between Moody's Corporation company and SMBC Group company, which one holds the most compliance certifications ?

Between Moody's Corporation company and SMBC Group company, which one holds the fewest compliance certifications ?

Between Moody's Corporation company and SMBC Group company, which one has the most subsidiaries ?

Between Moody's Corporation company and SMBC Group company, which one has the largest number of employees ?

Between Moody's Corporation and SMBC Group, which company holds both SOC 2 Type 1 certifications ?

Between Moody's Corporation and SMBC Group, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Moody's Corporation or SMBC Group ?

Which company is PCI DSS compliant — Moody's Corporation or SMBC Group ?

Between Moody's Corporation and SMBC Group, which company complies with HIPAA regulations for healthcare data ?

Between Moody's Corporation and SMBC Group, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2026-5314

Risk Information

CVE-2026-32929

Risk Information

CVE-2026-32928

Risk Information

CVE-2026-32927

Risk Information

CVE-2026-32926

Risk Information