Comparison Overview
ATI Physical Therapy

ATI Physical Therapy
2001 Butterfield Rd, Downers Grove, 60515, US
Last Update: 02/04/2026
With over 30 years’ experience and approximately 850 locations nationwide, ATI Physical Therapy prides itself on being at the forefront of patient care and customer service for the physical therapy industry. How do we do this? Through our dedication to ongoing research,...

Grupo Fleury
Avenida Morumbi, 8860, São Paulo, SP, BR
Last Update: 04/09/2026
O Grupo Fleury é reconhecido como uma referência de qualidade em medicina diagnóstica no país, com soluções completas, coordenação de cuidado centrada no indivíduo, capacidade de inovação e tecnologia. Temos um portfólio de saúde integrado, preventivo e híbrido, nascem...
Compliance Ranges Comparison

ATI Physical Therapy







Grupo Fleury






Benchmark & Cyber Underwriting Signals
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for ATI Physical Therapy in 2026.
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for Grupo Fleury in 2026.
Incident History - ATI Physical Therapy (X = Date, Y = Severity)
ATI Physical Therapy cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Grupo Fleury (X = Date, Y = Severity)
Grupo Fleury cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

ATI Physical Therapy

Grupo Fleury
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.