Comparison Overview

Baltimore Alliance for Careers in Healthcare

VS

VCU Health

Baltimore Alliance for Careers in Healthcare

1500 Union Ave, Baltimore, 21211, US
Last Update: 2026-01-25
View Profile
Between 650 and 699
http://www.baltimorealliance.org

The Baltimore Alliance for Careers in Healthcare (BACH) is a nonprofit organization dedicated to eliminating the critical shortage of qualified healthcare workers in Baltimore by working with local agencies, healthcare institutions and community organizations. BACH's mission is to act as an intermediary to address unemployment, underemployment and healthcare workforce shortage issues in Baltimore by identifying healthcare career pathways leading to economic independence and facilitating the training programs for residents to advance in these careers while helping hospitals in and around Baltimore grow their own direct-care workforce. BACH’s allied health career coaching model has evolved into a highly successful effort that produces programs leading to the advancement of front-line, middle-skill workers in many of the Baltimore area's hospitals and long-term care facilities.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

VCU Health

1250 E. Marshall Street, Richmond, 23219, US
Last Update: 2026-01-18
Between 700 and 749
http://careers.vcuhealth.org

We are a strong, passionate team of more than 12,500 who take pride in caring for every person who comes through our doors. We lift each other up so we can provide the very best and safest care to those who need us most. Together. Every day. With the support of our university, we make up an academic medical center committed to excellence in patient care, innovation and training tomorrow’s health care workforce. We continue to educate, research and evolve – staying on the cutting edge of care. As a community of innovators, every team member can contribute a spark of ingenuity igniting a force to discover the next cure, hold the next hand, solve the greatest challenges and create the health care of tomorrow. We foster an atmosphere of respect and welcoming for all communities. We infuse our teams with diverse talent that inspires everyone to contribute openly and freely, maximizing their impact and creating meaningful change for our patients and community. Join our team and help us create a new kind of patient experience. Join VCU Health. EEO Statement: VCU Health System strictly prohibits and does not tolerate discrimination against, or harassment of, team members, applicants, or any other covered persons because of age, race, ethnicity, religion, culture, language, physical or mental disability, socioeconomic status, sex (sexual orientation, gender identity or expression and pregnancy), protected veteran status, marital status, genetic information, or any other protected characteristics under applicable federal, state, or local law. Pay Transparency Provisions: VCU Health System complies with the Pay Transparency Provisions.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 11,563
Subsidiaries: 3
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bach-baltimore.jpeg
Baltimore Alliance for Careers in Healthcare
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/vcu-health-system.jpeg
VCU Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Baltimore Alliance for Careers in Healthcare
100%
Compliance Rate
0/4 Standards Verified
VCU Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Baltimore Alliance for Careers in Healthcare in 2026.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for VCU Health in 2026.

Incident History — Baltimore Alliance for Careers in Healthcare (X = Date, Y = Severity)

Baltimore Alliance for Careers in Healthcare cyber incidents detection timeline including parent company and subsidiaries

Incident History — VCU Health (X = Date, Y = Severity)

VCU Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bach-baltimore.jpeg
Baltimore Alliance for Careers in Healthcare
Incidents

Date Detected: 12/2025
Type:Breach
Attack Vector: Third-party web portal compromise
Blog: Blog
https://images.rankiteo.com/companyimages/vcu-health-system.jpeg
VCU Health
Incidents

Date Detected: 05/2019
Type:Data Leak
Attack Vector: Insider Threat
Blog: Blog

Date Detected: 07/2018
Type:Data Leak
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 01/2017
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

VCU Health company demonstrates a stronger AI Cybersecurity Score compared to Baltimore Alliance for Careers in Healthcare company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

VCU Health company has faced a higher number of disclosed cyber incidents historically compared to Baltimore Alliance for Careers in Healthcare company.

In the current year, VCU Health company and Baltimore Alliance for Careers in Healthcare company have not reported any cyber incidents.

Neither VCU Health company nor Baltimore Alliance for Careers in Healthcare company has reported experiencing a ransomware attack publicly.

Both VCU Health company and Baltimore Alliance for Careers in Healthcare company have disclosed experiencing at least one data breach.

Neither VCU Health company nor Baltimore Alliance for Careers in Healthcare company has reported experiencing targeted cyberattacks publicly.

Neither Baltimore Alliance for Careers in Healthcare company nor VCU Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds any compliance certifications.

Neither company holds any compliance certifications.

VCU Health company has more subsidiaries worldwide compared to Baltimore Alliance for Careers in Healthcare company.

VCU Health company employs more people globally than Baltimore Alliance for Careers in Healthcare company, reflecting its scale as a Hospitals and Health Care.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds SOC 2 Type 1 certification.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds SOC 2 Type 2 certification.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds ISO 27001 certification.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds PCI DSS certification.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds HIPAA certification.

Neither Baltimore Alliance for Careers in Healthcare nor VCU Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction() function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global map engine settings.

Published
Date
2026-01-24
Updated
Date
2026-01-24
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
Description

The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options’ parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. NOTE: Successful exploitation of this vulnerability requires that the PDFCrowd API key is blank (also known as "demo mode", which is the default configuration when the plugin is installed) or known.

Published
Date
2026-01-24
Updated
Date
2026-01-24
Risk Information
cvss3
Base: 6.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
Description

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, with a lower-privileged role (e.g., Subscriber-level access and above), to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires an admin to grant Hustle module permissions (or module edit access) to the low-privileged user so they can access the Hustle admin page and obtain the required nonce.

Published
Date
2026-01-24
Updated
Date
2026-01-24
Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdk_public_action AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user roles.

Published
Date
2026-01-24
Updated
Date
2026-01-24
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Description

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Published
Date
2026-01-24
Updated
Date
2026-01-24
Risk Information
cvss3
Base: 4.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
References