What is the official website of Brown Medicine ?

The official website of Brown Medicine is http://www.BrownMed.org.

What is Brown Medicine's cybersecurity risk score?

Brown Medicine has an AI-generated cybersecurity risk score of 687 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has Brown Medicine experienced?

According to Rankiteo, Brown Medicine currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Brown Medicine been affected by any supply chain cyber incidents ?

According to Rankiteo, Brown Medicine has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Brown Medicine have SOC 2 Type 1 certification ?

According to Rankiteo, Brown Medicine is not certified under SOC 2 Type 1.

Does Brown Medicine have SOC 2 Type 2 certification ?

According to Rankiteo, Brown Medicine does not hold a SOC 2 Type 2 certification.

Does Brown Medicine comply with GDPR ?

According to Rankiteo, Brown Medicine is not listed as GDPR compliant.

Does Brown Medicine have PCI DSS certification ?

According to Rankiteo, Brown Medicine does not currently maintain PCI DSS compliance.

Does Brown Medicine comply with HIPAA ?

According to Rankiteo, Brown Medicine is not compliant with HIPAA regulations.

Does Brown Medicine have ISO 27001 certification ?

According to Rankiteo,Brown Medicine is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Brown Medicine operate in ?

Brown Medicine operates primarily in the Medical Practices industry.

How many employees does Brown Medicine have ?

Brown Medicine employs approximately 158 people worldwide.

Does Brown Medicine own any subsidiaries ?

Brown Medicine presently has no subsidiaries across any sectors.

How many LinkedIn followers does Brown Medicine have ?

Brown Medicine's official LinkedIn profile has approximately 2,232 followers.

What is the NAICS classification code for Brown Medicine ?

Brown Medicine is classified under the NAICS code 621, which corresponds to Ambulatory Health Care Services.

Does Brown Medicine have a Crunchbase profile ?

No, Brown Medicine does not have a profile on Crunchbase.

Does Brown Medicine have a LinkedIn profile ?

Yes, Brown Medicine maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/brown-medicine.

How many cybersecurity incidents has Brown Medicine experienced ?

As of August 26, 2026, Rankiteo reports that Brown Medicine has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Brown Medicine have ?

Brown Medicine has an estimated 9,778 peer or competitor companies worldwide.

What types of cybersecurity incidents has Brown Medicine faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Brown Medicine

Boost Score +25 with badge (5 left)

687

/1000

Weak

712

/1000

Moderate

Brown Medicine Vendor Cyber Rating & Cyber Score

BrownMed.org

Add Your Compliance Badge

Brown Medicine is a nonprofit primary care, specialty outpatient and sub-specialty medical group practice with over 200 physicians and multiple patient care locations across the state of Rhode Island. Brown Medicine is affiliated with Brown University’s Warren Alpert Medical School, along with five other medical practices, to form Brown Physicians, Inc. (BPI), a physicial-led nonprofit federation. Employing more than 500 doctors, BPI enables a new level of coordination for clinical care, research and teaching in southern New England.

Brown Medicine A.I CyberSecurity Scoring

Scoring History

Brown Medicine

Brown Medicine CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Brown Medicine

Breach

100

7/2026

LIFBRO178430599...

Loading…

A.I.

Brown Medicine Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Brown Medicine

Incidents vs Medical Practices Industry Avg (This Year)

Brown Medicine has 21.88% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Brown Medicine has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Brown Medicine vs Medical Practices Industry Avg (This Year)

Brown Medicine reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - Brown Medicine (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Brown Medicine Subsidiaries

Parent Company

Brown Medicine

Medical Practices

Website: http://www.BrownMed.org

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

Brown Medicine Similar Companies

Hamad Medical Corporation

hamad.qa

Hamad Medical Corporation (HMC) is the main provider of secondary and tertiary healthcare in Qatar and one of the leading hospital providers in the Middle East. For more than three decades, HMC has been dedicated to delivering the safest, most effective and compassionate care to all its patients. HMC manages twelve hospitals – nine specialist hospitals and three community hospitals – as well as the National Ambulance Service and home and residential care services. In January 2016, HMC achieved the significant distinction of becoming the first healthcare system across the globe to have all its hospitals accredited by Joint Commission International under the Academic Medical Center accreditation program. Additionally, the National Ambulance Service, Home Healthcare Service, Stroke Service and Palliative Care, have all received this prestigious accreditation since 2011. To meet the needs of a rapidly growing population, HMC has announced ambitious plans to expand capacity across its network through to 2030. HMC is leading the development of the region’s first academic health system – combining innovative research, top-class education and excellent clinical care – and is committed to building a legacy of healthcare expertise in Qatar. HMC collaborates with key partners who are experts in Qatar and beyond, including Weill Cornell Medical College-Qatar, the Institute for Healthcare Improvement and Partners Healthcare, Boston. HMC is also the first hospital system in the Middle East to achieve institutional accreditation from the Accreditation Council of Graduate Medical Education – International (ACGME-I), which demonstrates excellence in the way medical graduates are trained through residency, internship and fellowship programs. For more information about working at HMC, please visit www.hmc.org.qa/en/employees_careers/employees_careers.aspx

Loading…

NEWS

Brown Medicine CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-80138

SUMMARY

ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious php_cli_filepath value to execute arbitrary commands as the web server user.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-79912

SUMMARY

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 8.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 8.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

3.9

REFERENCES

CVE-2026-79911

SUMMARY

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 10)

cvss2

Base Score: 10.0

Complexity: LOW

AV:N/AC:L/Au:N/C:C/I:C/A:C

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-70665

SUMMARY

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration (DCR) endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certain conditions, this allows a self-registered client to obtain scopes beyond what the server intended to grant. In DynamicClientRegistrationController#application_params, the scopes attribute is assigned directly from params[:scope] with no validation against Doorkeeper.configuration.scopes or optional_scopes. Combined with enforce_configured_scopes being off by default and Doorkeeper's ScopeChecker prioritizing application-level scopes over server-level scopes, this creates a privilege escalation path. This issue is fixed in version 1.10.4.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-55805

SUMMARY

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://www.drupal.org/sa-core-2026-012

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…