Comparison Overview

Shoppers Drug Mart

VS

Grupo Dia

Shoppers Drug Mart

Toronto, CA
Last Update: 2026-04-01
View Profile
Between 650 and 699
http://www.shoppersdrugmart.ca

Built on a foundation of professional expertise and personal service, Shoppers Drug Mart has been meeting Canadians'​ health care needs for 50 years. What was once a small pharmacy in Toronto has grown into an organization of over 1,200 stores from coast to coast, becoming an indelible part of the lives of Canadians, young and old. Yet despite our growth, we have never forgotten our origins. We have always remained true to our belief that the personal satisfaction of each and every customer is at the root of our success - and it can only be ensured by the commitment of people who realize that success is built one customer at a time.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 31,984
Subsidiaries: 5
12-month incidents
1
Known data breaches
2
Attack type number
1
View Profile

Grupo Dia

Parque Empresarial Las Rozas, Edif. Tripark C/ Jacinto Benavente, 2 A, Las Rozas, Madrid, ES, 28232
Last Update: 2026-03-28
Between 750 and 799
http://www.diacorporate.com

With more than 40 years history, Grupo DIA is a Spanish multinational in the food, drugstore, beauty and health distribution sector. DIA arrived with the commitment to respond to the needs of all families, offering quality at the best price through a wide network of local shops. Since then, our effort in contributing to the family economy of our customers has remained in time. Currently, we have the largest network of stores: more than 6,600 establishments distributed between Spain, Portugal, Brazil and Argentina. The success of our business is the result of the commitment of our teams, with more than 39,000 experienced employees, led by a team of professionals with great knowledge of the market, with the aim of making DIA the favourite choice of consumers.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 15,858
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/shoppers-drug-mart.jpeg
Shoppers Drug Mart
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/dia-grupo.jpeg
Grupo Dia
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Shoppers Drug Mart
100%
Compliance Rate
0/4 Standards Verified
Grupo Dia
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

Shoppers Drug Mart has 50.0% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Grupo Dia in 2026.

Incident History — Shoppers Drug Mart (X = Date, Y = Severity)

Shoppers Drug Mart cyber incidents detection timeline including parent company and subsidiaries

Incident History — Grupo Dia (X = Date, Y = Severity)

Grupo Dia cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/shoppers-drug-mart.jpeg
Shoppers Drug Mart
Incidents

Date Detected: 3/2026
Type:Breach
Motivation: Extortion (response demanded by March 19)
Blog: Blog

Date Detected: 5/2018
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/dia-grupo.jpeg
Grupo Dia
Incidents

No Incident

FAQ

Grupo Dia company demonstrates a stronger AI Cybersecurity Score compared to Shoppers Drug Mart company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Shoppers Drug Mart company has historically faced a number of disclosed cyber incidents, whereas Grupo Dia company has not reported any.

In the current year, Shoppers Drug Mart company has reported more cyber incidents than Grupo Dia company.

Neither Grupo Dia company nor Shoppers Drug Mart company has reported experiencing a ransomware attack publicly.

Shoppers Drug Mart company has disclosed at least one data breach, while the other Grupo Dia company has not reported such incidents publicly.

Neither Grupo Dia company nor Shoppers Drug Mart company has reported experiencing targeted cyberattacks publicly.

Neither Shoppers Drug Mart company nor Grupo Dia company has reported experiencing or disclosing vulnerabilities publicly.

Neither Shoppers Drug Mart nor Grupo Dia holds any compliance certifications.

Neither company holds any compliance certifications.

Shoppers Drug Mart company has more subsidiaries worldwide compared to Grupo Dia company.

Shoppers Drug Mart company employs more people globally than Grupo Dia company, reflecting its scale as a Retail.

Neither Shoppers Drug Mart nor Grupo Dia holds SOC 2 Type 1 certification.

Neither Shoppers Drug Mart nor Grupo Dia holds SOC 2 Type 2 certification.

Neither Shoppers Drug Mart nor Grupo Dia holds ISO 27001 certification.

Neither Shoppers Drug Mart nor Grupo Dia holds PCI DSS certification.

Neither Shoppers Drug Mart nor Grupo Dia holds HIPAA certification.

Neither Shoppers Drug Mart nor Grupo Dia holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References