Comparison Overview

AHA Center For Health Innovation

VS

Bon Secours Mercy Health

AHA Center For Health Innovation

Ste 400, Chicago, IL, 60606, US
Last Update: 2025-02-21 (UTC)
View Profile
Between 750 and 799
https://www.aha.org/center

The AHA Center for Health Innovation, which encompasses Health Forum and the Health Research & Educational Trust, harnesses the collective power of partnerships - with businesses and other organizations - to advance the work of the American Hospital Association. We partner with stakeholders across the health ecosystem to support health care organizations and leaders to accelerate their improvement and innovation goals. For more information about our social media policy: http://www.aha.org/content/13/socialmediapolicy.pdf

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 33
Subsidiaries: 16
12-month incidents
0
Known data breaches
0
Attack type number
2
View Profile

Bon Secours Mercy Health

None, None, Cincinnati, Ohio, US, 45237
Last Update: 2025-07-27 (UTC)
Between 750 and 799
https://bsmhealth.org/

On September 1, 2018 Bon Secours Health System and Mercy Health combined to become the United States’ fifth largest Catholic health care ministry and one of the nation’s 20 largest health care systems. With 48 hospitals, thousands of providers, over 1,000 points of care and over 60,000 employees Bon Secours Mercy Health serves communities across seven states and Ireland. We are dedicated to continually improving health care quality, safety and cost effectiveness. Our hospitals, care sites and clinicians are recognized for clinical and operational excellence. By utilizing robust measurement and reporting processes, we hold ourselves accountable for enhancing care and improving outcomes for our patients, residents and clients.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 30,644
Subsidiaries: 4
12-month incidents
0
Known data breaches
3
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/aha-center-health-innovation.jpeg
AHA Center For Health Innovation
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bon-secours-mercy-health-system.jpeg
Bon Secours Mercy Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
AHA Center For Health Innovation
100%
Compliance Rate
0/4 Standards Verified
Bon Secours Mercy Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for AHA Center For Health Innovation in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Bon Secours Mercy Health in 2025.

Incident History — AHA Center For Health Innovation (X = Date, Y = Severity)

AHA Center For Health Innovation cyber incidents detection timeline including parent company and subsidiaries

Incident History — Bon Secours Mercy Health (X = Date, Y = Severity)

Bon Secours Mercy Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/aha-center-health-innovation.jpeg
AHA Center For Health Innovation
Incidents

Date Detected: 10/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 10/2025
Type:Ransomware
Attack Vector: exploitation of vulnerabilities in virtual environments, ransomware-as-a-service (RaaS) affiliate model
Motivation: financial gain, disruption of operations
Blog: Blog

Date Detected: 9/2025
Type:Ransomware
Blog: Blog
https://images.rankiteo.com/companyimages/bon-secours-mercy-health-system.jpeg
Bon Secours Mercy Health
Incidents

Date Detected: 01/2020
Type:Breach
Attack Vector: Invoice Printing Error
Blog: Blog

Date Detected: 08/2016
Type:Breach
Blog: Blog

Date Detected: 4/2016
Type:Breach
Attack Vector: Inadvertent Exposure (Misconfigured Internet-Accessible Files)
Blog: Blog

FAQ

Bon Secours Mercy Health company demonstrates a stronger AI Cybersecurity Score compared to AHA Center For Health Innovation company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

AHA Center For Health Innovation company has faced a higher number of disclosed cyber incidents historically compared to Bon Secours Mercy Health company.

In the current year, AHA Center For Health Innovation company has reported more cyber incidents than Bon Secours Mercy Health company.

AHA Center For Health Innovation company has confirmed experiencing a ransomware attack, while Bon Secours Mercy Health company has not reported such incidents publicly.

Bon Secours Mercy Health company has disclosed at least one data breach, while AHA Center For Health Innovation company has not reported such incidents publicly.

AHA Center For Health Innovation company has reported targeted cyberattacks, while Bon Secours Mercy Health company has not reported such incidents publicly.

Neither AHA Center For Health Innovation company nor Bon Secours Mercy Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds any compliance certifications.

Neither company holds any compliance certifications.

AHA Center For Health Innovation company has more subsidiaries worldwide compared to Bon Secours Mercy Health company.

Bon Secours Mercy Health company employs more people globally than AHA Center For Health Innovation company, reflecting its scale as a Hospitals and Health Care.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds SOC 2 Type 1 certification.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds SOC 2 Type 2 certification.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds ISO 27001 certification.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds PCI DSS certification.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds HIPAA certification.

Neither AHA Center For Health Innovation nor Bon Secours Mercy Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References