Comparison Overview

New York University

VS

University of Kentucky

New York University

70 Washington Sq South, New York, NY, US, 10012-1091
Last Update: 2026-04-01
Between 800 and 849

Founded in 1831, NYU is one of the world’s foremost research universities and is a member of the selective Association of American Universities. The first Global Network University, NYU has degree-granting university campuses in New York and Abu Dhabi, and has announced a third in Shanghai; has a dozen other global academic sites, including London, Paris, Florence, Tel Aviv, Buenos Aires, and Accra; and sends more students to study abroad than any other U.S. college or university. Through its numerous schools and colleges, NYU conducts research and provides education in the arts and sciences, law, medicine, business, dentistry, education, nursing, the cinematic and performing arts, music and studio arts, public administration, social work, and continuing and professional studies, among other areas.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 26,355
Subsidiaries: 25
12-month incidents
0
Known data breaches
1
Attack type number
1

University of Kentucky

Lexington, KY, US, 40506
Last Update: 2026-04-02
Between 800 and 849

The University of Kentucky is a public, research-extensive, land grant university dedicated to improving people's lives through excellence in teaching, research, health care, cultural enrichment, and economic development for over 150 years. The University of Kentucky: - Facilitates learning, informed by scholarship and research. - Expands knowledge through research, scholarship and creative activity. - Serves a global community by disseminating, sharing and applying knowledge. The University, as the flagship institution, plays a critical leadership role for the Commonwealth by contributing to the economic development and quality of life within Kentucky's borders and beyond. The University nurtures a diverse community characterized by fairness and equal opportunity. From Paducah to Pikeville, Covington to Cumberland, the University of Kentucky touches lives across the Bluegrass State, providing education, cultural stimulation and economic development in all 120 counties. Considering that residents of all Kentucky counties benefit from the University's medical care, community service, innovative research and creative teaching and instruction, there's no question UK is The University of Kentucky.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 23,338
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/new-york-university.jpeg
New York University
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/universityofkentucky.jpeg
University of Kentucky
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
New York University
100%
Compliance Rate
0/4 Standards Verified
University of Kentucky
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for New York University in 2026.

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for University of Kentucky in 2026.

Incident History — New York University (X = Date, Y = Severity)

New York University cyber incidents detection timeline including parent company and subsidiaries

Incident History — University of Kentucky (X = Date, Y = Severity)

University of Kentucky cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/new-york-university.jpeg
New York University
Incidents

Date Detected: 05/2017
Type:Breach
Attack Vector: Accidental Leak
Blog: Blog
https://images.rankiteo.com/companyimages/universityofkentucky.jpeg
University of Kentucky
Incidents

No Incident

FAQ

New York University company demonstrates a stronger AI Cybersecurity Score compared to University of Kentucky company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

New York University company has historically faced a number of disclosed cyber incidents, whereas University of Kentucky company has not reported any.

In the current year, University of Kentucky company and New York University company have not reported any cyber incidents.

Neither University of Kentucky company nor New York University company has reported experiencing a ransomware attack publicly.

New York University company has disclosed at least one data breach, while the other University of Kentucky company has not reported such incidents publicly.

Neither University of Kentucky company nor New York University company has reported experiencing targeted cyberattacks publicly.

Neither New York University company nor University of Kentucky company has reported experiencing or disclosing vulnerabilities publicly.

Neither New York University nor University of Kentucky holds any compliance certifications.

Neither company holds any compliance certifications.

New York University company has more subsidiaries worldwide compared to University of Kentucky company.

New York University company employs more people globally than University of Kentucky company, reflecting its scale as a Higher Education.

Neither New York University nor University of Kentucky holds SOC 2 Type 1 certification.

Neither New York University nor University of Kentucky holds SOC 2 Type 2 certification.

Neither New York University nor University of Kentucky holds ISO 27001 certification.

Neither New York University nor University of Kentucky holds PCI DSS certification.

Neither New York University nor University of Kentucky holds HIPAA certification.

Neither New York University nor University of Kentucky holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X