CNHF
Company Details
Linkedin ID:
childrens-hospital-foundation
Employees number:
105
Number of followers:
7,435
NAICS:
561499
Industry Type:
Homepage:
childrensnational.org
IP Addresses:
0
Company ID:
CHI_1902693
Scan Status:
In-progress
Children's National Hospital Foundation Company CyberSecurity Posture
childrensnational.org
Children's National Hospital Foundation connects care, community and discovery to help every child grow up stronger. We work with individual donors, corporations, foundations and community groups. Generous donations support groundbreaking research and exceptional, compassionate care for patients and their families. Follow our progress: Facebook.com/childrensnational Twitter.com/childrensnatl Instagram.com/childrensnational More about Children’s National Hospital: Children’s National Hospital, based in Washington, D.C., was established in 1870 to help every child grow up stronger. Today, it is one of the top 10 children’s hospitals in the nation and ranked in all specialties evaluated by U.S. News & World Report. Children’s National is transforming pediatric medicine for all children. The Children’s National Research & Innovation Campus opened in 2021, a first-of-its-kind pediatric hub dedicated to developing new and better ways to care for kids. Children’s National has been designated three times in a row as a Magnet® hospital, demonstrating the highest standards of nursing and patient care delivery. This pediatric academic health system offers expert care through a convenient, community-based primary care network and specialty care locations in the D.C. metropolitan area, including Maryland and Virginia. Children’s National is home to the Children’s National Research Institute and Sheikh Zayed Institute for Pediatric Surgical Innovation. It is recognized for its expertise and innovation in pediatric care and as a strong voice for children through advocacy at the local, regional and national levels. As a non-profit, Children's National relies on generous donors to help ensure that every child receives the care they need.
Children's National Hospital Foundation A.I CyberSecurity Scoring
CNHF Risk Score (AI oriented)Between 750 and 799
CNHF
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
CNHF Global Score (TPRM)XXXX
CNHF
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
CNHF Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
Children's National Hospital
Breach
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: The D.C.-based Children’s National Medical Center suffered a data security incident after employees fell for phishing emails that affected 18,000 patients. The compromised information included names, dates of birth, medication, and physicians’ notes regarding diagnosis and treatment. They informed the health system about the issue, the transcription company, Ascend, was contacted and asked to re-secure the site and remove the transcription documents from the Ascend server.
CNHF Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for CNHF
Incidents vs Fundraising Industry Average (This Year)
No incidents recorded for Children's National Hospital Foundation in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Children's National Hospital Foundation in 2025.
Incident Types CNHF vs Fundraising Industry Avg (This Year)
No incidents recorded for Children's National Hospital Foundation in 2025.
Incident History — CNHF (X = Date, Y = Severity)
CNHF cyber incidents detection timeline including parent company and subsidiaries
CNHF Company Subsidiaries
Children's National Hospital Foundation connects care, community and discovery to help every child grow up stronger. We work with individual donors, corporations, foundations and community groups. Generous donations support groundbreaking research and exceptional, compassionate care for patients and their families. Follow our progress: Facebook.com/childrensnational Twitter.com/childrensnatl Instagram.com/childrensnational More about Children’s National Hospital: Children’s National Hospital, based in Washington, D.C., was established in 1870 to help every child grow up stronger. Today, it is one of the top 10 children’s hospitals in the nation and ranked in all specialties evaluated by U.S. News & World Report. Children’s National is transforming pediatric medicine for all children. The Children’s National Research & Innovation Campus opened in 2021, a first-of-its-kind pediatric hub dedicated to developing new and better ways to care for kids. Children’s National has been designated three times in a row as a Magnet® hospital, demonstrating the highest standards of nursing and patient care delivery. This pediatric academic health system offers expert care through a convenient, community-based primary care network and specialty care locations in the D.C. metropolitan area, including Maryland and Virginia. Children’s National is home to the Children’s National Research Institute and Sheikh Zayed Institute for Pediatric Surgical Innovation. It is recognized for its expertise and innovation in pediatric care and as a strong voice for children through advocacy at the local, regional and national levels. As a non-profit, Children's National relies on generous donors to help ensure that every child receives the care they need.
Loading...
CNHF Similar Companies
Philips
Over the past decade we have transformed into a focused leader in health technology. At Philips, our purpose is to improve people’s health and well-being through meaningful innovation. We aim to improve 2.5 billion lives per year by 2030, including 400 million in underserved communities. We see h
Since its start in 1855 as the nation's first hospital devoted exclusively to caring for children, The Children's Hospital of Philadelphia has been the birthplace for many dramatic firsts in pediatric medicine. The Hospital has fostered medical discoveries and innovations that have improved pediatri
Johns Hopkins Medicine is a governing structure for the University’s School of Medicine and the health system, coordinating their research, teaching, patient care, and related enterprises. The Johns Hopkins Hospital opened in 1889, followed four years later by the university’s School of Medicine
OhioHealth
OhioHealth is a nationally recognized, not-for-profit, faith-based health system of more than 35,000 associates, providers and volunteers. We lead with our mission to improve the health of those we serve throughout our 16 hospitals and 200+ urgent, primary and specialty care sites spanning 50 Ohio c
Johnson & Johnson MedTech
At Johnson & Johnson MedTech, we are working to solve the world’s most pressing healthcare challenges through innovations at the intersection of biology and technology. With deep expertise in surgery, orthopaedics, cardiovascular, and vision, we design healthcare solutions that are smarter, less inv
Sunrise Senior Living
Beginning with a single community in 1981, Sunrise Senior Living has grown to more than 270 communities throughout the U.S. and Canada. Each of our communities continues the mission laid out by founders Paul and Terry Klaassen more than 40 years ago: to champion quality of life for all seniors. Jo
.png)
CNHF CyberSecurity News
May 20, 2025 07:00 AM
Women Know Cyber: 150 Fascinating Females Fighting Cybercrime
Role models for students, parents, educators, and the cybersecurity community Sponsored by Secureworks.
January 16, 2025 08:00 AM
Children's National AI chief discusses her role and its many demands
Alda Mizaku, vice president and chief data and artificial intelligence officer at Children's National Hospital in Washington, D.C..
December 03, 2024 08:00 AM
Ransomware Groups Attack Multiple UK NHS Trusts
Ransomware groups continue to attack the healthcare sector and have claimed multiple victims in the UK in the past few days.
November 30, 2024 08:00 AM
Alder Hey children’s hospital explores ‘data breach’ after ransomware claims
Screenshots purporting to be from systems of Liverpool NHS health facility have been posted on dark web.
October 03, 2024 07:00 AM
CHILDREN’S NATIONAL HOSPITAL AND KANAD HOSPITAL ANNOUNCE SIGNING A MEMORANDUM OF UNDERSTANDING TO ADVANCE PEDIATRIC CARE
Kanad Hospital and Children's National Hospital leaders In frame (L to R): John Birky, M.D., CEO at Kanad Hospital; Michelle Riley-Brown,...
April 08, 2023 07:00 AM
Children’s National Hospital selects new CEO, and more: MED MOVES
Michelle Riley-Brown has been selected as the next president and chief executive officer of the Children's National Hospital.
March 14, 2023 07:00 AM
From Neuroscience to Data Science: My Road Into Cybersecurity
I've always been interested in math and using scientific methods to solve hard problems. I received my undergraduate degree in cognitive science with a...
September 28, 2016 07:00 AM
SAVE THE DATE: White Hat Gala, Oct. 27
Executives representing Washington, D.C.'s cybersecurity, business and federal contracting communities will join alongside hospital friends...
September 19, 2014 07:00 AM
SAVE THE DATE: Cyber Security Community to Host 2nd Annual White Hat Gala, Oct. 23, 2014
The Nation's Capital Cyber Security Community will host its 2nd Annual White Hat Gala “Casino Royale: Betting on Our Kids” on Thursday, October 23, from 6:30...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
CNHF CyberSecurity History Information
Official Website of Children's National Hospital Foundation
The official website of Children's National Hospital Foundation is https://childrensnational.org/giving.
Children's National Hospital Foundation’s AI-Generated Cybersecurity Score
According to Rankiteo, Children's National Hospital Foundation’s AI-generated cybersecurity score is 758, reflecting their Fair security posture.
How many security badges does Children's National Hospital Foundation’ have ?
According to Rankiteo, Children's National Hospital Foundation currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Children's National Hospital Foundation have SOC 2 Type 1 certification ?
According to Rankiteo, Children's National Hospital Foundation is not certified under SOC 2 Type 1.
Does Children's National Hospital Foundation have SOC 2 Type 2 certification ?
According to Rankiteo, Children's National Hospital Foundation does not hold a SOC 2 Type 2 certification.
Does Children's National Hospital Foundation comply with GDPR ?
According to Rankiteo, Children's National Hospital Foundation is not listed as GDPR compliant.
Does Children's National Hospital Foundation have PCI DSS certification ?
According to Rankiteo, Children's National Hospital Foundation does not currently maintain PCI DSS compliance.
Does Children's National Hospital Foundation comply with HIPAA ?
According to Rankiteo, Children's National Hospital Foundation is not compliant with HIPAA regulations.
Does Children's National Hospital Foundation have ISO 27001 certification ?
According to Rankiteo,Children's National Hospital Foundation is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Children's National Hospital Foundation
Children's National Hospital Foundation operates primarily in the Fundraising industry.
Number of Employees at Children's National Hospital Foundation
Children's National Hospital Foundation employs approximately 105 people worldwide.
Subsidiaries Owned by Children's National Hospital Foundation
Children's National Hospital Foundation presently has no subsidiaries across any sectors.
Children's National Hospital Foundation’s LinkedIn Followers
Children's National Hospital Foundation’s official LinkedIn profile has approximately 7,435 followers.
NAICS Classification of Children's National Hospital Foundation
Children's National Hospital Foundation is classified under the NAICS code 561499, which corresponds to All Other Business Support Services.
Children's National Hospital Foundation’s Presence on Crunchbase
No, Children's National Hospital Foundation does not have a profile on Crunchbase.
Children's National Hospital Foundation’s Presence on LinkedIn
Yes, Children's National Hospital Foundation maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/childrens-hospital-foundation.
Cybersecurity Incidents Involving Children's National Hospital Foundation
As of December 21, 2025, Rankiteo reports that Children's National Hospital Foundation has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
Children's National Hospital Foundation has an estimated 1,146 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at Children's National Hospital Foundation ?
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
How does Children's National Hospital Foundation detect and respond to cybersecurity incidents ?
Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with ascend, and containment measures with re-secured the site, containment measures with removed the transcription documents from the ascend server..
Incident Details
Can you provide details on each incident ?
Title: Data Security Incident at Children’s National Medical Center
Description: The D.C.-based Children’s National Medical Center suffered a data security incident after employees fell for phishing emails that affected 18,000 patients.
Type: Phishing
Attack Vector: Phishing Emails
Vulnerability Exploited: Human Error
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident ?
Incident : Phishing CHI215523522
Data Compromised: Names, Dates of birth, Medication, Physicians’ notes regarding diagnosis and treatment
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Dates Of Birth, Medication, Physicians’ Notes Regarding Diagnosis And Treatment and .
Which entities were affected by each incident ?
Incident : Phishing CHI215523522
Entity Name: Children’s National Medical Center
Entity Type: Healthcare
Industry: Healthcare
Location: D.C.
Customers Affected: 18,000 patients
Response to the Incidents
What measures were taken in response to each incident ?
Incident : Phishing CHI215523522
Third Party Assistance: Ascend.
Containment Measures: Re-secured the siteRemoved the transcription documents from the Ascend server
How does the company involve third-party assistance in incident response ?
Third-Party Assistance: The company involves third-party assistance in incident response through Ascend, .
Data Breach Information
What type of data was compromised in each breach ?
Incident : Phishing CHI215523522
Type of Data Compromised: Names, Dates of birth, Medication, Physicians’ notes regarding diagnosis and treatment
Number of Records Exposed: 18,000
Sensitivity of Data: High
Personally Identifiable Information: namesdates of birth
How does the company handle incidents involving personally identifiable information (PII) ?
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by re-secured the site, removed the transcription documents from the ascend server and .
Post-Incident Analysis
What is the company's process for conducting post-incident analysis ?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Ascend, .
Additional Questions
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were names, dates of birth, medication, physicians’ notes regarding diagnosis and treatment and .
Response to the Incidents
What third-party assistance was involved in the most recent incident ?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was ascend, .
What containment measures were taken in the most recent incident ?
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Re-secured the siteRemoved the transcription documents from the Ascend server.
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were physicians’ notes regarding diagnosis and treatment, names, dates of birth and medication.
What was the number of records exposed in the most significant breach ?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 18.0K.
.png)
Latest Global CVEs (Not Company-Specific)
Description
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L104
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L94
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3420841%40ajax-search-for-woocommerce%2Ftrunk&old=3398612%40ajax-search-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=#file136
- https://wordpress.org/plugins/ajax-search-for-woocommerce
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8149103e-105d-401d-8a15-b07d131baaac?source=cve
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/class-functions.php#L41
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-ajax-common.php#L61
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L205
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L2795
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/templates/members.php#L26
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3421362%40ultimate-member%2Ftrunk&old=3408617%40ultimate-member%2Ftrunk&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/61337d2d-d15a-45f2-b730-fc034eb3cd31?source=cve
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=childrens-hospital-foundation' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
