Internal validation & live display

Multiple badges & continuous verification

Faster underwriting decisions

Ascension Company CyberSecurity Posture

ascension.org

Answering God's call to bring health, healing and hope to all. Ascension is one of the nation’s leading non-profit and Catholic health systems, with a Mission of delivering compassionate, personalized care to all, with special attention to those most vulnerable. In FY2025, Ascension provided $1.7 billion in care of persons living in poverty and other community benefit programs along with $1.8 billion of unreimbursed care for Medicare patients. Across 16 states and the District of Columbia, Ascension’s network encompasses approximately 99,000 associates, 22,300 aligned providers, 95 wholly owned or consolidated hospitals, and ownership interests in 26 additional hospitals through partnerships. Ascension also operates 30 senior living facilities and a variety of other care sites offering a range of healthcare services.

Ascension A.I CyberSecurity Scoring

Ascension

Company Details

Linkedin ID:

ascensionorg

Website:

http://www.ascension.org/

Employees number:

66,110

Number of followers:

285,431

NAICS:

Industry Type:

Hospitals and Health Care

Homepage:

ascension.org

IP Addresses:

858

Company ID:

ASC_1647020

Scan Status:

Completed

Ascension Risk Score (AI oriented)

Between 0 and 549

Ascension Hospitals and Health Care

Updated: 09/12/2025

Powered by our proprietary A.I cyber incident model
Insurance preferes TPRM score to calculate premium

Ascension Global Score (TPRM)

XXXX

Ascension Hospitals and Health Care

—

Instant access to detailed risk factors
Benchmark vs. industry & size peers

Vulnerabilities
Findings

Ascension Company CyberSecurity News & History

Past Incidents

Attack Types

Entity	Type	Severity	Impact	Seen	Incident Details
Ascension	Breach	85	4	6/2015	ASC124828422
Rankiteo Explanation : Attack with significant impact with customers data leaks Description: Ascension Michigan notifies some of its patients of a data breach that happened between Oct. 15, 2015, and Sept. 8, 2021. It noticed suspicious activity in its electronic health record and upon investigation found that an unauthorized individual accessed its patient information. The compromised information included full name, date of birth, address(es), email address(es), phone number(s), health insurance information, health insurance identification number and medical records, Social Security numbers. The Ascension Michigan offered free credit and identity theft protection-monitoring services to the affected patients.
Ascension Health	Breach	100	5	5/2024	ASC2293322092425
Rankiteo Explanation : Attack threatening the organization's existence Description: Ascension Health, a Missouri-based hospital system operating 140 hospitals across 19 U.S. states, faced a May 2024 data breach exposing the personal information of over 5 million individuals. The breach allegedly stemmed from negligent cybersecurity practices, leading to a proposed class-action lawsuit for failing to protect sensitive data. Plaintiffs accused Ascension of violating consumer protection laws in six states, along with claims of negligence and negligence per se. The exposed data—though not explicitly detailed in the article—likely includes medical, financial, or personally identifiable information (PII), given the healthcare context. The breach’s scale and the legal standing granted by a federal judge underscore its severity, as it directly threatens patient trust, regulatory compliance, and potential financial liabilities. The incident highlights systemic vulnerabilities in healthcare cybersecurity, where data exposures can have long-term reputational and operational consequences for providers.
Ascension	Breach	100	5	4/2025	ASC220051225
Rankiteo Explanation : Attack threatening the organization's existence Description: Ascension, one of the largest private healthcare systems in the United States, experienced a data breach that exposed the personal and healthcare information of over 430,000 patients. The incident, disclosed in April, involved a data theft attack impacting a former business partner in December. Attackers accessed personal health information related to inpatient visits, including physician names, admission and discharge dates, diagnosis and billing codes, medical record numbers, and insurance company names. Personal information such as names, addresses, phone numbers, email addresses, dates of birth, race, gender, and Social Security numbers were also compromised. The breach was linked to a vulnerability in third-party software used by the former business partner, likely part of widespread Clop ransomware attacks.
Ascension Health	Cyber Attack	100	5	2/2024	ASC546082925
Rankiteo Explanation : Attack threatening the organization’s existence Description: On December 19, 2024, the Maine Office of the Attorney General disclosed a severe data breach affecting Ascension Health, stemming from an external hacking incident that occurred on May 8, 2024. The breach compromised the personal data of approximately 5,599,699 individuals, including 658 Maine residents. The exposed information encompasses highly sensitive details such as medical records, payment data, insurance information, and government-issued identification documents.This incident poses a critical threat to the affected individuals, as the leaked data could facilitate identity theft, financial fraud, and targeted phishing attacks. The scale of the breach—impacting millions—suggests systemic vulnerabilities in Ascension Health’s cybersecurity defenses, raising concerns about the organization’s ability to safeguard patient confidentiality. The inclusion of medical and financial data elevates the risk of long-term harm, including potential blackmail, fraudulent medical claims, or unauthorized access to healthcare services. The breach not only undermines trust in Ascension Health but also highlights the broader risks associated with cyberattacks on healthcare providers, where data integrity is paramount for patient safety and operational continuity.
Ascension	Ransomware	100	5	2/2024	ASC146072825
Rankiteo Explanation : Attack threatening the organization's existence Description: The California Attorney General's Office reported that Ascension Health experienced a ransomware attack on May 8, 2024, affecting personal information of patients and associates. The breach potentially exposed names, medical information, payment information, insurance information, government identification, and other personal information. The number of individuals affected is currently unknown.
Ascension Health	Ransomware	100	5	5/2024	ASC547091725
Rankiteo Explanation : Attack threatening the organization’s existence Description: On December 19, 2024, the Washington State Office of the Attorney General disclosed a ransomware attack targeting Ascension Health, initially detected on May 8, 2024. The breach compromised the personal data of 5,787 Washington residents, exposing highly sensitive information, including Social Security numbers (SSNs) and medical records. The attack posed severe risks to affected individuals, as exposed SSNs and medical data can facilitate identity theft, financial fraud, and targeted phishing scams. Given the nature of the stolen data—health records in particular—the breach also raised concerns about long-term privacy violations, potential blackmail, and misuse of medical histories. Ascension Health, a major healthcare provider, faced reputational damage, regulatory scrutiny, and potential legal liabilities due to the failure to prevent the attack. The incident underscored vulnerabilities in healthcare cybersecurity, where ransomware groups increasingly target critical patient data for extortion. The exposure of such information not only harms individuals but also erodes trust in the organization’s ability to safeguard confidential records. Recovery efforts likely involved forensic investigations, notification processes, credit monitoring for victims, and system reinforcements to mitigate future threats.
Ascension	Ransomware	100	5	2/2024	ASC5102151091125
Rankiteo Explanation : Attack threatening the organization's existence Description: In February 2024, Ascension, a major healthcare provider, suffered a devastating ransomware attack initiated when a contractor clicked a phishing link via Microsoft Bing and Edge. The attack exploited Kerberoasting, leveraging Microsoft’s outdated RC4 encryption (a 1980s protocol long deemed insecure) to gain administrative privileges through Active Directory. Hackers then deployed ransomware across thousands of systems, compromising personal data, medical records, payment/insurance details, and government IDs of over 5.6 million patients. The breach disrupted hospital operations, delayed critical treatments, and exposed systemic vulnerabilities tied to Microsoft’s default security configurations—including weak password policies for privileged accounts. Despite repeated warnings from CISA, FBI, and NSA about RC4 and Kerberoasting risks (notably by state actors like Iran), Microsoft had yet to disable RC4 by default, prolonging exposure. Ascension’s incident underscores the cascading impact of legacy encryption flaws, poor default security settings, and third-party contractor risks in healthcare cybersecurity.
Ascension	Ransomware	100	4	12/2024	ASC000032225
Rankiteo Explanation : Attack with significant impact with customers data leaks Description: Ascension experienced a ransomware attack involving social engineering which resulted in the data of 5,599,699 individuals being affected. An employee was tricked into downloading malware, resulting in a data breach. Although there was no evidence that data was extracted from their Electronic Health Records (EHR) and other clinical systems where complete patient records are securely kept, personal information was involved and notifications to the affected individuals have been initiated.
Ascension	Ransomware	100	4	5/2024	ASC004032225
Rankiteo Explanation : Attack with significant impact with customers data leaks Description: Ascension faced a cyber breach where a ransomware attack led to unauthorized disclosure of patient personal information. The incident caused class action lawsuits and disruptions in emergency medical services as well as interruptions to the electronic health records system. Identified as conducted by the Russian-speaking group Black Basta, the attack's consequences included services diversion, posing risks to patient care and data security.
Ascension	Ransomware	100	7	6/2024	ASC1012070724
Rankiteo Explanation : Attack that could injure or kill people Description: Ascension faced a ransomware attack resulting in severe disruptions across 140 hospitals, implicating patient care and treatment schedules. The recovery was hindered by the need for 'assurance' letters to reconnect systems with suppliers, adding to the operational chaos. The impact extended to canceled appointments and surgeries, and pushed medical staff to revert to manual processes. The organization's swift action towards transparency and reconnection of supplies post-attack mitigated prolonged delays.

Ascension

Breach

Severity: 85

Impact: 4

Seen: 6/2015

Blog:

ASC124828422

Rankiteo Explanation

Attack with significant impact with customers data leaks

Description: Ascension Michigan notifies some of its patients of a data breach that happened between Oct. 15, 2015, and Sept. 8, 2021. It noticed suspicious activity in its electronic health record and upon investigation found that an unauthorized individual accessed its patient information. The compromised information included full name, date of birth, address(es), email address(es), phone number(s), health insurance information, health insurance identification number and medical records, Social Security numbers. The Ascension Michigan offered free credit and identity theft protection-monitoring services to the affected patients.

Ascension Health

Breach

Severity: 100

Impact: 5

Seen: 5/2024

Blog:

ASC2293322092425

Rankiteo Explanation

Attack threatening the organization's existence

Description: Ascension Health, a Missouri-based hospital system operating 140 hospitals across 19 U.S. states, faced a **May 2024 data breach** exposing the **personal information of over 5 million individuals**. The breach allegedly stemmed from negligent cybersecurity practices, leading to a **proposed class-action lawsuit** for failing to protect sensitive data. Plaintiffs accused Ascension of violating **consumer protection laws in six states**, along with claims of **negligence and negligence per se**. The exposed data—though not explicitly detailed in the article—likely includes **medical, financial, or personally identifiable information (PII)**, given the healthcare context. The breach’s scale and the **legal standing granted by a federal judge** underscore its severity, as it directly threatens **patient trust, regulatory compliance, and potential financial liabilities**. The incident highlights systemic vulnerabilities in healthcare cybersecurity, where data exposures can have **long-term reputational and operational consequences** for providers.

Ascension

Breach

Severity: 100

Impact: 5

Seen: 4/2025

Blog:

ASC220051225

Rankiteo Explanation

Attack threatening the organization's existence

Description: Ascension, one of the largest private healthcare systems in the United States, experienced a data breach that exposed the personal and healthcare information of over 430,000 patients. The incident, disclosed in April, involved a data theft attack impacting a former business partner in December. Attackers accessed personal health information related to inpatient visits, including physician names, admission and discharge dates, diagnosis and billing codes, medical record numbers, and insurance company names. Personal information such as names, addresses, phone numbers, email addresses, dates of birth, race, gender, and Social Security numbers were also compromised. The breach was linked to a vulnerability in third-party software used by the former business partner, likely part of widespread Clop ransomware attacks.

Ascension Health

Cyber Attack

Severity: 100

Impact: 5

Seen: 2/2024

Blog:

ASC546082925

Rankiteo Explanation

Attack threatening the organization’s existence

Description: On December 19, 2024, the Maine Office of the Attorney General disclosed a severe data breach affecting **Ascension Health**, stemming from an external hacking incident that occurred on **May 8, 2024**. The breach compromised the personal data of approximately **5,599,699 individuals**, including **658 Maine residents**. The exposed information encompasses highly sensitive details such as **medical records, payment data, insurance information, and government-issued identification documents**.This incident poses a critical threat to the affected individuals, as the leaked data could facilitate **identity theft, financial fraud, and targeted phishing attacks**. The scale of the breach—impacting millions—suggests systemic vulnerabilities in Ascension Health’s cybersecurity defenses, raising concerns about the organization’s ability to safeguard patient confidentiality. The inclusion of **medical and financial data** elevates the risk of long-term harm, including potential **blackmail, fraudulent medical claims, or unauthorized access to healthcare services**. The breach not only undermines trust in Ascension Health but also highlights the broader risks associated with cyberattacks on healthcare providers, where data integrity is paramount for patient safety and operational continuity.

Ascension

Ransomware

Severity: 100

Impact: 5

Seen: 2/2024

Blog:

ASC146072825

Rankiteo Explanation

Attack threatening the organization's existence

Description: The California Attorney General's Office reported that Ascension Health experienced a ransomware attack on May 8, 2024, affecting personal information of patients and associates. The breach potentially exposed names, medical information, payment information, insurance information, government identification, and other personal information. The number of individuals affected is currently unknown.

Ascension Health

Ransomware

Severity: 100

Impact: 5

Seen: 5/2024

Blog:

ASC547091725

Rankiteo Explanation

Attack threatening the organization’s existence

Description: On December 19, 2024, the Washington State Office of the Attorney General disclosed a **ransomware attack** targeting **Ascension Health**, initially detected on **May 8, 2024**. The breach compromised the personal data of **5,787 Washington residents**, exposing highly sensitive information, including **Social Security numbers (SSNs) and medical records**. The attack posed severe risks to affected individuals, as exposed SSNs and medical data can facilitate **identity theft, financial fraud, and targeted phishing scams**. Given the nature of the stolen data—health records in particular—the breach also raised concerns about **long-term privacy violations, potential blackmail, and misuse of medical histories**. Ascension Health, a major healthcare provider, faced **reputational damage, regulatory scrutiny, and potential legal liabilities** due to the failure to prevent the attack. The incident underscored vulnerabilities in healthcare cybersecurity, where ransomware groups increasingly target **critical patient data** for extortion. The exposure of such information not only harms individuals but also erodes trust in the organization’s ability to safeguard confidential records. Recovery efforts likely involved **forensic investigations, notification processes, credit monitoring for victims, and system reinforcements** to mitigate future threats.

Ascension

Ransomware

Severity: 100

Impact: 5

Seen: 2/2024

Blog:

ASC5102151091125

Rankiteo Explanation

Attack threatening the organization's existence

Description: In February 2024, Ascension, a major healthcare provider, suffered a devastating **ransomware attack** initiated when a contractor clicked a phishing link via Microsoft Bing and Edge. The attack exploited **Kerberoasting**, leveraging Microsoft’s outdated **RC4 encryption** (a 1980s protocol long deemed insecure) to gain administrative privileges through **Active Directory**. Hackers then deployed ransomware across **thousands of systems**, compromising **personal data, medical records, payment/insurance details, and government IDs of over 5.6 million patients**. The breach disrupted hospital operations, delayed critical treatments, and exposed systemic vulnerabilities tied to Microsoft’s default security configurations—including weak password policies for privileged accounts. Despite repeated warnings from **CISA, FBI, and NSA** about RC4 and Kerberoasting risks (notably by state actors like Iran), Microsoft had yet to disable RC4 by default, prolonging exposure. Ascension’s incident underscores the cascading impact of **legacy encryption flaws**, **poor default security settings**, and **third-party contractor risks** in healthcare cybersecurity.

Ascension

Ransomware

Severity: 100

Impact: 4

Seen: 12/2024

Blog:

ASC000032225

Rankiteo Explanation

Attack with significant impact with customers data leaks

Description: Ascension experienced a ransomware attack involving social engineering which resulted in the data of 5,599,699 individuals being affected. An employee was tricked into downloading malware, resulting in a data breach. Although there was no evidence that data was extracted from their Electronic Health Records (EHR) and other clinical systems where complete patient records are securely kept, personal information was involved and notifications to the affected individuals have been initiated.

Ascension

Ransomware

Severity: 100

Impact: 4

Seen: 5/2024

Blog:

ASC004032225

Rankiteo Explanation

Attack with significant impact with customers data leaks

Description: Ascension faced a cyber breach where a ransomware attack led to unauthorized disclosure of patient personal information. The incident caused class action lawsuits and disruptions in emergency medical services as well as interruptions to the electronic health records system. Identified as conducted by the Russian-speaking group Black Basta, the attack's consequences included services diversion, posing risks to patient care and data security.

Ascension

Ransomware

Severity: 100

Impact: 7

Seen: 6/2024

Blog:

ASC1012070724

Rankiteo Explanation

Attack that could injure or kill people

Description: Ascension faced a ransomware attack resulting in severe disruptions across 140 hospitals, implicating patient care and treatment schedules. The recovery was hindered by the need for 'assurance' letters to reconnect systems with suppliers, adding to the operational chaos. The impact extended to canceled appointments and surgeries, and pushed medical staff to revert to manual processes. The organization's swift action towards transparency and reconnection of supplies post-attack mitigated prolonged delays.

Ascension Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒

A.I. Risk Score Predictions locked

Access Monitoring Plan

Underwriter Stats for Ascension

Incidents vs Hospitals and Health Care Industry Average (This Year)

Ascension has 33.33% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Ascension has 53.85% more incidents than the average of all companies with at least one recorded incident.

Incident Types Ascension vs Hospitals and Health Care Industry Avg (This Year)

Ascension reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History — Ascension (X = Date, Y = Severity)

Ascension cyber incidents detection timeline including parent company and subsidiaries

Ascension Company Subsidiaries

Security Report → Compare→

Northside Hospital

northside.com

Northside Hospital — a certified Great Place To Work® — is one of Georgia’s top health systems. We have acute-care hospitals in Atlanta, Canton, Cumming, Duluth and Lawrenceville and hundreds of outpatient locations across the state. Northside Hospital leads the U.S. in newborn deliveries and is amo

Security Report → Compare→

Read Article →

August 14, 2025 07:00 AM

Barracuda Managed XDR Named Best SecOps Solution in 2025 Tech Ascension Awards

PRNewswire/ -- Barracuda Networks, Inc., a leading cybersecurity company providing complete protection against complex threats for...

Read Article →

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Ascension CyberSecurity History Information

Official Website of Ascension

The official website of Ascension is http://www.ascension.org/.

Ascension’s AI-Generated Cybersecurity Score

According to Rankiteo, Ascension’s AI-generated cybersecurity score is 132, reflecting their Critical security posture.

How many security badges does Ascension’ have ?

According to Rankiteo, Ascension currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Ascension have SOC 2 Type 1 certification ?

According to Rankiteo, Ascension is not certified under SOC 2 Type 1.

Does Ascension have SOC 2 Type 2 certification ?

According to Rankiteo, Ascension does not hold a SOC 2 Type 2 certification.

Does Ascension comply with GDPR ?

According to Rankiteo, Ascension is not listed as GDPR compliant.

Does Ascension have PCI DSS certification ?

According to Rankiteo, Ascension does not currently maintain PCI DSS compliance.

Does Ascension comply with HIPAA ?

According to Rankiteo, Ascension is not compliant with HIPAA regulations.

Does Ascension have ISO 27001 certification ?

According to Rankiteo,Ascension is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Ascension

Ascension operates primarily in the Hospitals and Health Care industry.

Number of Employees at Ascension

Ascension employs approximately 66,110 people worldwide.

Subsidiaries Owned by Ascension

Ascension presently has no subsidiaries across any sectors.

Ascension’s LinkedIn Followers

Ascension’s official LinkedIn profile has approximately 285,431 followers.

NAICS Classification of Ascension

Ascension is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Ascension’s Presence on Crunchbase

No, Ascension does not have a profile on Crunchbase.

Ascension’s Presence on LinkedIn

Yes, Ascension maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ascensionorg.

Cybersecurity Incidents Involving Ascension

As of December 10, 2025, Rankiteo reports that Ascension has experienced 10 cybersecurity incidents.

Number of Peer and Competitor Companies

Ascension has an estimated 30,832 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Ascension ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Ransomware and Breach.

How does Ascension detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with free credit and identity theft protection-monitoring services, and communication strategy with notified affected patients, and recovery measures with transparency, recovery measures with reconnection of supplies, and communication strategy with transparency, and communication strategy with notifications to affected individuals..

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Exposure

Impact

Title: Ascension Michigan Data Breach

Description: Ascension Michigan notifies some of its patients of a data breach that happened between Oct. 15, 2015, and Sept. 8, 2021. It noticed suspicious activity in its electronic health record and upon investigation found that an unauthorized individual accessed its patient information. The compromised information included full name, date of birth, address(es), email address(es), phone number(s), health insurance information, health insurance identification number and medical records, Social Security numbers. Ascension Michigan offered free credit and identity theft protection-monitoring services to the affected patients.

Date Detected: 2021-09-08

Type: Data Breach

Attack Vector: Unauthorized Access

Threat Actor: Unauthorized Individual

Incident : Ransomware

Exposure

Impact

Title: Ransomware Attack on Ascension

Type: Ransomware

Incident : Ransomware Attack

Exposure

Impact

Title: Ascension Ransomware Attack

Description: Ascension experienced a ransomware attack involving social engineering which resulted in the data of 5,599,699 individuals being affected.

Type: Ransomware Attack

Attack Vector: Social Engineering

Vulnerability Exploited: Human Error

Motivation: Financial

Incident : Ransomware Attack

Exposure

Impact

Title: Ascension Ransomware Attack

Type: Ransomware Attack

Threat Actor: Black Basta

Incident : Data Breach

Exposure

Impact

Title: Ascension Healthcare Data Breach

Date Detected: December

Date Publicly Disclosed: April

Type: Data Breach

Attack Vector: Vulnerability in third-party software

Vulnerability Exploited: Third-party software vulnerability

Threat Actor: Clop ransomware group

Motivation: Data theft

Incident : Ransomware Attack

Exposure

Impact

Title: Ascension Health Ransomware Attack

Date Detected: 2024-05-08

Type: Ransomware Attack

Incident : Data Breach

Exposure

Impact

Title: Ascension Health Data Breach (2024)

Description: The Maine Office of the Attorney General reported a data breach involving Ascension Health on December 19, 2024. The breach occurred on May 8, 2024, due to an external hacking incident, affecting approximately 5,599,699 individuals in total, with 658 Maine residents specifically impacted. Personal data potentially compromised includes medical, payment, insurance, and government identification information.

Date Detected: 2024-05-08

Date Publicly Disclosed: 2024-12-19

Type: Data Breach

Attack Vector: External Hacking

Incident : ransomware

Exposure

Impact

Title: Ascension Hospital Ransomware Attack (2024)

Description: A ransomware attack on Ascension hospital in 2024 resulted in the theft of personal data, medical data, payment information, insurance information, and government IDs for over 5.6 million patients. The attack originated from a contractor clicking a phishing link via Microsoft Bing and Edge, exploiting vulnerabilities in Microsoft's Active Directory (Kerberoasting technique) due to outdated RC4 encryption support. Hackers gained administrative privileges and deployed ransomware across thousands of systems.

Date Detected: 2024-02

Type: ransomware

Attack Vector: phishingexploitation of outdated encryption (RC4)Kerberoastingprivilege escalation via Active Directory

Vulnerability Exploited: RC4 encryption (obsolete since 1980s)Kerberoasting in Active Directorydefault weak password policies (privileged accounts <14 characters)

Motivation: financial gain (ransomware)data theft

Incident : ransomware

Exposure

Impact

Title: Ascension Health Ransomware Attack and Data Breach (2024)

Description: On December 19, 2024, the Washington State Office of the Attorney General reported a data breach involving Ascension Health, discovered on May 8, 2024. The breach was caused by a ransomware attack affecting approximately 5,787 Washington residents and potentially exposing personal information, including social security numbers and medical data.

Date Detected: 2024-05-08

Date Publicly Disclosed: 2024-12-19

Type: ransomware

Incident : Data Breach

Exposure

Impact

Title: Ascension Health Data Breach (May 2024)

Description: Missouri-based Ascension Health faced a proposed class action alleging negligent failure to protect the personal information of over 5 million people exposed in a May 2024 data breach. Plaintiffs claimed violations of consumer protection laws in six states, negligence, and negligence per se. The breach affected Ascension, a hospital system with 140 hospitals across 19 states.

Type: Data Breach

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Ransomware.

How does the company identify the attack vectors used in incidents ?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Social Engineering and phishing link clicked via Microsoft Bing/Edge on contractor’s laptop.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach ASC124828422

Data Compromised: Full name, Date of birth, Address(es), Email address(es), Phone number(s), Health insurance information, Health insurance identification number, Medical records, Social security numbers

Systems Affected: Electronic Health Record

Identity Theft Risk: High

Incident : Ransomware ASC1012070724

Systems Affected: 140 hospitals

Operational Impact: Canceled appointmentsCanceled surgeriesReverted to manual processes

Incident : Ransomware Attack ASC000032225

Data Compromised: Personal information

Systems Affected: Electronic Health Records (EHR)Other Clinical Systems

Incident : Ransomware Attack ASC004032225

Data Compromised: Patient personal information

Systems Affected: Electronic health records systemEmergency medical services

Downtime: Services diversion

Operational Impact: Disruptions in emergency medical services and interruptions to the electronic health records system

Legal Liabilities: Class action lawsuits

Incident : Data Breach ASC220051225

Data Compromised: Personal health information, Physician names, Admission and discharge dates, Diagnosis and billing codes, Medical record numbers, Insurance company names, Names, Addresses, Phone numbers, Email addresses, Dates of birth, Race, Gender, Social security numbers

Incident : Ransomware Attack ASC146072825

Data Compromised: Names, Medical information, Payment information, Insurance information, Government identification, Other personal information

Incident : Data Breach ASC546082925

Data Compromised: Medical information, Payment information, Insurance information, Government identification information

Identity Theft Risk: High

Payment Information Risk: High

Incident : ransomware ASC5102151091125

Data Compromised: Personal data, Medical records, Payment information, Insurance information, Government ids

Systems Affected: thousands of computers

Operational Impact: severe (healthcare operations disrupted)

Brand Reputation Impact: high (public scrutiny, regulatory concern)

Identity Theft Risk: high (5.6M records exposed)

Payment Information Risk: high

Incident : ransomware ASC547091725

Data Compromised: Social security numbers, Medical information

Identity Theft Risk: high

Incident : Data Breach ASC2293322092425

Data Compromised: Personal information

Customer Complaints: Class action lawsuit filed

Brand Reputation Impact: Significant (class action alleging negligence)

Legal Liabilities: Proposed class action for negligence, negligence per se, and violations of consumer protection laws in six states

Identity Theft Risk: High (personal information of 5M+ exposed)

What types of data are most commonly compromised in incidents ?

Industry: healthcare

Location: United States

Customers Affected: 5.6 million patients

Incident : ransomware ASC547091725

Entity Name: Ascension Health

Entity Type: healthcare provider

Industry: healthcare

Location: United States (Washington residents affected)

Customers Affected: 5,787

Incident : Data Breach ASC2293322092425

Entity Name: Ascension Health

Entity Type: Hospital System

Industry: Healthcare

Location: Missouri, USA (operates in 19 states)

Size: 140 hospitals

Customers Affected: 5,000,000+

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach ASC124828422

Remediation Measures: Free credit and identity theft protection-monitoring services

Communication Strategy: Notified affected patients

Incident : Ransomware ASC1012070724

Recovery Measures: TransparencyReconnection of supplies

Communication Strategy: Transparency

Incident : Ransomware Attack ASC000032225

Communication Strategy: Notifications to affected individuals

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach ASC124828422

Type of Data Compromised: Personally identifiable information, Health information

Sensitivity of Data: High

Personally Identifiable Information: full namedate of birthaddress(es)email address(es)phone number(s)Social Security numbers

Incident : Ransomware Attack ASC000032225

Type of Data Compromised: Personal information

Number of Records Exposed: 5599699

Sensitivity of Data: High

Incident : Ransomware Attack ASC004032225

Type of Data Compromised: Patient personal information

Incident : Data Breach ASC220051225

Type of Data Compromised: Personal health information, Personal information

Number of Records Exposed: 430000

Sensitivity of Data: High

Personally Identifiable Information: NamesAddressesPhone numbersEmail addressesDates of birthRaceGenderSocial Security numbers

Incident : Ransomware Attack ASC146072825

Type of Data Compromised: Names, Medical information, Payment information, Insurance information, Government identification, Other personal information

Incident : Data Breach ASC546082925

Type of Data Compromised: Medical, Payment, Insurance, Government identification

Number of Records Exposed: 5,599,699

Sensitivity of Data: High

Incident : ransomware ASC5102151091125

Type of Data Compromised: Personal data, Medical records, Payment information, Insurance details, Government ids

Number of Records Exposed: 5.6 million

Sensitivity of Data: high (PII, PHI, financial data)

Data Exfiltration: yes

Data Encryption: no (RC4 encryption exploited)

Personally Identifiable Information: yes

Incident : ransomware ASC547091725

Type of Data Compromised: Personally identifiable information (pii), Protected health information (phi)

Number of Records Exposed: 5,787

Sensitivity of Data: high

Personally Identifiable Information: social security numbersmedical information

Incident : Data Breach ASC2293322092425

Type of Data Compromised: Personal Information

Number of Records Exposed: 5,000,000+

Sensitivity of Data: High

Personally Identifiable Information: Yes

What measures does the company take to prevent data exfiltration ?

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Free credit and identity theft protection-monitoring services, .

Ransomware Information

Was ransomware involved in any of the incidents ?

Incident : Ransomware Attack ASC000032225

Data Encryption: True

Incident : Data Breach ASC220051225

Ransomware Strain: Clop

Incident : ransomware ASC5102151091125

Data Encryption: yes (ransomware deployed across systems)

Data Exfiltration: yes

How does the company recover data encrypted by ransomware ?

Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Transparency, Reconnection of supplies, .

Regulatory Compliance

Were there any regulatory violations and fines imposed for each incident ?

Incident : Ransomware Attack ASC004032225

Legal Actions: Class action lawsuits

Incident : Data Breach ASC546082925

Regulatory Notifications: Maine Office of the Attorney General

Incident : ransomware ASC5102151091125

Legal Actions: Sen. Ron Wyden's call for FTC investigation into Microsoft's default security configurations,

Regulatory Notifications: CISA, FBI, NSA warnings (2023–2024) about RC4/Kerberoasting exploits in healthcare

Incident : ransomware ASC547091725

Regulatory Notifications: Washington State Office of the Attorney General

Incident : Data Breach ASC2293322092425

Regulations Violated: Consumer Protection Laws (six states),

Legal Actions: Proposed class action lawsuit (negligence, negligence per se, consumer protection violations)

How does the company ensure compliance with regulatory requirements ?

Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Class action lawsuits, Sen. Ron Wyden's call for FTC investigation into Microsoft's default security configurations, , Proposed class action lawsuit (negligence, negligence per se, consumer protection violations).

Lessons Learned and Recommendations

What lessons were learned from each incident ?

Incident : ransomware ASC5102151091125

Lessons Learned: Default configurations in enterprise software (e.g., Microsoft Active Directory) can enable large-scale breaches if outdated protocols (e.g., RC4) are retained., Kerberoasting exploits persist due to legacy encryption support, despite decades of warnings., Organizations rarely modify default security settings, placing burden on vendors to enforce secure defaults., Phishing remains a critical initial access vector, especially via default applications (e.g., Microsoft Edge/Bing).

What recommendations were made to prevent future incidents ?

Incident : ransomware ASC5102151091125

Recommendations: Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting., Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows.Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting., Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows.Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting., Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows.Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting., Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows.Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting., Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows.

What are the key lessons learned from past incidents ?

Key Lessons Learned: The key lessons learned from past incidents are Default configurations in enterprise software (e.g., Microsoft Active Directory) can enable large-scale breaches if outdated protocols (e.g., RC4) are retained.,Kerberoasting exploits persist due to legacy encryption support, despite decades of warnings.,Organizations rarely modify default security settings, placing burden on vendors to enforce secure defaults.,Phishing remains a critical initial access vector, especially via default applications (e.g., Microsoft Edge/Bing).

References

Where can I find more information about each incident ?

Incident : Ransomware Attack ASC146072825

Source: California Attorney General's Office

Incident : Data Breach ASC546082925

Source: Maine Office of the Attorney General

Date Accessed: 2024-12-19

Incident : ransomware ASC5102151091125

Source: CyberScoop

Incident : ransomware ASC5102151091125

Source: Sen. Ron Wyden’s letter to FTC Chair Andrew Ferguson

Incident : ransomware ASC5102151091125

Source: CISA, FBI, NSA joint advisory (2023–2024) on RC4/Kerberoasting

Incident : ransomware ASC547091725

Source: Washington State Office of the Attorney General

Date Accessed: 2024-12-19

Incident : Data Breach ASC2293322092425

Source: US District Court for the Eastern District of Missouri (Judge John A. Ross ruling)

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Attorney General's Office, and Source: Maine Office of the Attorney GeneralDate Accessed: 2024-12-19, and Source: CyberScoop, and Source: Sen. Ron Wyden’s letter to FTC Chair Andrew Ferguson, and Source: CISA, FBI, NSA joint advisory (2023–2024) on RC4/Kerberoasting, and Source: Washington State Office of the Attorney GeneralDate Accessed: 2024-12-19, and Source: US District Court for the Eastern District of Missouri (Judge John A. Ross ruling).

Investigation Status

What is the current status of the investigation for each incident ?

Incident : ransomware ASC5102151091125

Investigation Status: ongoing (FTC investigation requested by Sen. Wyden)

Incident : Data Breach ASC2293322092425

Investigation Status: Ongoing (class action lawsuit in progress)

How does the company communicate the status of incident investigations to stakeholders ?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notified Affected Patients, Transparency and Notifications To Affected Individuals.

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident ?

Incident : Ransomware Attack ASC000032225

Customer Advisories: Notifications to affected individuals

Incident : ransomware ASC5102151091125

Stakeholder Advisories: Sen. Wyden’S Oversight Findings Shared With Ascension And Microsoft.

What advisories does the company provide to stakeholders and customers following an incident ?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Notifications To Affected Individuals, and Sen. Wyden’S Oversight Findings Shared With Ascension And Microsoft.

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : Ransomware Attack ASC000032225

Entry Point: Social Engineering

Incident : ransomware ASC5102151091125

Entry Point: phishing link clicked via Microsoft Bing/Edge on contractor’s laptop

High Value Targets: Active Directory Administrative Privileges,

Data Sold on Dark Web: Active Directory Administrative Privileges,

Post-Incident Analysis

What were the root causes and corrective actions taken for each incident ?

Incident : Ransomware Attack ASC000032225

Root Causes: Human Error,

Incident : ransomware ASC5102151091125

Root Causes: Use Of Obsolete Rc4 Encryption In Active Directory (Enabled By Default)., Default Weak Password Policies For Privileged Accounts., Phishing Attack Via Default Microsoft Applications (Edge/Bing)., Lack Of Network Segmentation Allowing Lateral Movement To Thousands Of Systems.,

Corrective Actions: Microsoft’S Planned Deprecation Of Rc4 (Q1 2026 For Active Directory)., Ascension Likely Implemented Stricter Password Policies And Active Directory Monitoring Post-Breach.,

What corrective actions has the company taken based on post-incident analysis ?

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Microsoft’S Planned Deprecation Of Rc4 (Q1 2026 For Active Directory)., Ascension Likely Implemented Stricter Password Policies And Active Directory Monitoring Post-Breach., .

Additional Questions

General Information

Who was the attacking group in the last incident ?

Last Attacking Group: The attacking group in the last incident were an Unauthorized Individual, Black Basta and Clop ransomware group.

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2021-09-08.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024-12-19.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were full name, date of birth, address(es), email address(es), phone number(s), health insurance information, health insurance identification number, medical records, Social Security numbers, , Personal Information, , Patient personal information, Personal health information, Physician names, Admission and discharge dates, Diagnosis and billing codes, Medical record numbers, Insurance company names, Names, Addresses, Phone numbers, Email addresses, Dates of birth, Race, Gender, Social Security numbers, , names, medical information, payment information, insurance information, government identification, other personal information, , Medical Information, Payment Information, Insurance Information, Government Identification Information, , personal data, medical records, payment information, insurance information, government IDs, , social security numbers, medical information, , Personal Information and .

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was Electronic Health Record and and Electronic Health Records (EHR)Other Clinical Systems and Electronic health records systemEmergency medical services and .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were date of birth, Race, Admission and discharge dates, Social Security numbers, full name, Diagnosis and billing codes, Phone numbers, medical information, names, insurance information, government IDs, address(es), other personal information, payment information, Personal health information, Addresses, Insurance Information, email address(es), personal data, medical records, Personal Information, Payment Information, Government Identification Information, phone number(s), Dates of birth, Gender, Medical Information, social security numbers, Patient personal information, government identification, Physician names, health insurance information, Names, Email addresses, health insurance identification number, Insurance company names and Medical record numbers.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 16.2M.

Regulatory Compliance

What was the most significant legal action taken for a regulatory violation ?

Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Class action lawsuits, Sen. Ron Wyden's call for FTC investigation into Microsoft's default security configurations, , Proposed class action lawsuit (negligence, negligence per se, consumer protection violations).

Lessons Learned and Recommendations

What was the most significant lesson learned from past incidents ?

Most Significant Lesson Learned: The most significant lesson learned from past incidents was Phishing remains a critical initial access vector, especially via default applications (e.g., Microsoft Edge/Bing).

What was the most significant recommendation implemented to improve cybersecurity ?

Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Vendors must proactively deprecate obsolete encryption standards, even if it risks breaking legacy systems., Microsoft should disable RC4 by default immediately (planned for Q1 2026 is insufficient)., Enforce stronger default password policies for privileged accounts (e.g., 14+ characters)., Healthcare sector should prioritize patching Active Directory vulnerabilities and monitoring for Kerberoasting. and Public disclosure of timelines for security fixes should be accelerated to reduce exposure windows..

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are CyberScoop, US District Court for the Eastern District of Missouri (Judge John A. Ross ruling), Sen. Ron Wyden’s letter to FTC Chair Andrew Ferguson, Washington State Office of the Attorney General, Maine Office of the Attorney General, California Attorney General's Office, CISA, FBI and NSA joint advisory (2023–2024) on RC4/Kerberoasting.

Investigation Status

What is the current status of the most recent investigation ?

Current Status of Most Recent Investigation: The current status of the most recent investigation is ongoing (FTC investigation requested by Sen. Wyden).

Stakeholder and Customer Advisories

What was the most recent stakeholder advisory issued ?

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was Sen. Wyden’s oversight findings shared with Ascension and Microsoft, .

What was the most recent customer advisory issued ?

Most Recent Customer Advisory: The most recent customer advisory issued was an Notifications to affected individuals.

Initial Access Broker

What was the most recent entry point used by an initial access broker ?

Most Recent Entry Point: The most recent entry point used by an initial access broker were an Social Engineering and phishing link clicked via Microsoft Bing/Edge on contractor’s laptop.

Post-Incident Analysis

What was the most significant root cause identified in post-incident analysis ?

Most Significant Root Cause: The most significant root cause identified in post-incident analysis was Human Error, Use of obsolete RC4 encryption in Active Directory (enabled by default).Default weak password policies for privileged accounts.Phishing attack via default Microsoft applications (Edge/Bing).Lack of network segmentation allowing lateral movement to thousands of systems..

What was the most significant corrective action taken based on post-incident analysis ?

Most Significant Corrective Action: The most significant corrective action taken based on post-incident analysis was Microsoft’s planned deprecation of RC4 (Q1 2026 for Active Directory).Ascension likely implemented stricter password policies and Active Directory monitoring post-breach..

References

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=ascensionorg' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation

Rapid

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest reports → View all security reports →

Badge your company to reduce your risk score and your cyber insurance costs!

Badge your company to reduce your risk score and your cyber insurance costs!

Ascension Company CyberSecurity Posture

Ascension A.I CyberSecurity Scoring

Ascension Company CyberSecurity News & History

Attack with significant impact with customers data leaks

Attack threatening the organization's existence

Attack threatening the organization's existence

Attack threatening the organization’s existence

Attack threatening the organization's existence

Attack threatening the organization’s existence

Attack threatening the organization's existence

Attack with significant impact with customers data leaks

Attack with significant impact with customers data leaks

Attack that could injure or kill people

Ascension

Ascension Health

Ascension

Ascension Health

Ascension

Ascension Health

Ascension

Ascension

Ascension

Ascension

Ascension Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

A.I Risk Score Likelihood 3 - 6 - 9 months

Underwriter Stats for Ascension

Incidents vs Hospitals and Health Care Industry Average (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Ascension vs Hospitals and Health Care Industry Avg (This Year)

Incident History — Ascension (X = Date, Y = Severity)

Ascension Company Subsidiaries

AscensionLast updated: N/A

Ascension

Ascension Similar Companies

McKesson

Rochester Regional Health

AdventHealth

IQVIA

Baptist Health

RWJBarnabas Health

Mercy Health

Beth Israel Deaconess Medical Center

Northside Hospital

Ascension CyberSecurity News

Class action against Ascension over 2024 cybersecurity breach trimmed, but may continue, judge rules

Cybersecurity News: npm update, Cursor Autorun flaw details, Microsoft probe over Ascension hack?

Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence

Ron Wyden asks FTC to investigate Microsoft for enabling Ascension ransomware attack

Senator Urges FTC Probe Into Microsoft After Ascension Ransomware Attack

US Senator urges probing Microsoft over cybersecurity negligence, ransomware risks

Wyden calls on FTC to investigate Microsoft for ‘gross cybersecurity negligence’ in protecting critical infrastructure

Wyden Says Microsoft Flaws Led to Hack of US Hospital System

Barracuda Managed XDR Named Best SecOps Solution in 2025 Tech Ascension Awards

Frequently Asked Questions

Ascension CyberSecurity History Information

Official Website of Ascension

Ascension’s AI-Generated Cybersecurity Score

How many security badges does Ascension’ have ?

Does Ascension have SOC 2 Type 1 certification ?

Does Ascension have SOC 2 Type 2 certification ?

Does Ascension comply with GDPR ?

Does Ascension have PCI DSS certification ?

Does Ascension comply with HIPAA ?

Does Ascension have ISO 27001 certification ?

Industry Classification of Ascension

Number of Employees at Ascension

Subsidiaries Owned by Ascension

Ascension’s LinkedIn Followers

NAICS Classification of Ascension

Ascension’s Presence on Crunchbase

Ascension’s Presence on LinkedIn

Cybersecurity Incidents Involving Ascension

Number of Peer and Competitor Companies

What types of cybersecurity incidents have occurred at Ascension ?

How does Ascension detect and respond to cybersecurity incidents ?

Incident Details

Can you provide details on each incident ?