What is the official website of COMHAR, Inc. ?

The official website of COMHAR, Inc. is http://www.comhar.org.

What is COMHAR, Inc.'s cybersecurity risk score?

COMHAR, Inc. has an AI-generated cybersecurity risk score of 701 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has COMHAR, Inc. experienced?

According to Rankiteo, COMHAR, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has COMHAR, Inc. been affected by any supply chain cyber incidents ?

According to Rankiteo, COMHAR, Inc. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does COMHAR, Inc. have SOC 2 Type 1 certification ?

According to Rankiteo, COMHAR, Inc. is not certified under SOC 2 Type 1.

Does COMHAR, Inc. have SOC 2 Type 2 certification ?

According to Rankiteo, COMHAR, Inc. does not hold a SOC 2 Type 2 certification.

Does COMHAR, Inc. comply with GDPR ?

According to Rankiteo, COMHAR, Inc. is not listed as GDPR compliant.

Does COMHAR, Inc. have PCI DSS certification ?

According to Rankiteo, COMHAR, Inc. does not currently maintain PCI DSS compliance.

Does COMHAR, Inc. comply with HIPAA ?

According to Rankiteo, COMHAR, Inc. is not compliant with HIPAA regulations.

Does COMHAR, Inc. have ISO 27001 certification ?

According to Rankiteo,COMHAR, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does COMHAR, Inc. operate in ?

COMHAR, Inc. operates primarily in the Individual and Family Services industry.

How many employees does COMHAR, Inc. have ?

COMHAR, Inc. employs approximately 511 people worldwide.

Does COMHAR, Inc. own any subsidiaries ?

COMHAR, Inc. presently has no subsidiaries across any sectors.

How many LinkedIn followers does COMHAR, Inc. have ?

COMHAR, Inc.'s official LinkedIn profile has approximately 2,871 followers.

What is the NAICS classification code for COMHAR, Inc. ?

COMHAR, Inc. is classified under the NAICS code 6241, which corresponds to Individual and Family Services.

Does COMHAR, Inc. have a Crunchbase profile ?

No, COMHAR, Inc. does not have a profile on Crunchbase.

Does COMHAR, Inc. have a LinkedIn profile ?

Yes, COMHAR, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/comhar-inc-.

How many cybersecurity incidents has COMHAR, Inc. experienced ?

As of September 12, 2026, Rankiteo reports that COMHAR, Inc. has experienced 1 cybersecurity incidents.

How many peer or competitor companies does COMHAR, Inc. have ?

COMHAR, Inc. has an estimated 5,442 peer or competitor companies worldwide.

What types of cybersecurity incidents has COMHAR, Inc. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

COMHAR, Inc.

Boost Score +25 with badge (5 left)

701

/1000

Moderate

726

/1000

Moderate

COMHAR, Inc. Vendor Cyber Rating & Cyber Score

comhar.org

Add Your Compliance Badge

COMHAR, Inc. is a nonprofit health & human services organization that provides a broad spectrum of integrated behavioral health, intellectual disabilities, HIV/AIDS, and home health services to children, adults and the elderly. COMHAR provides these services through a staff of approximately 570 in a range of community, home, residential, school and workplace settings. COMHAR serves ethnically and culturally diverse populations including Hispanic/Latino, LGBTQ+, and HIV/AIDS communities. COMHAR enjoys a long and proud history.

COMHAR, Inc.

COMHAR, Inc. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

COMHAR, Inc.

Breach

9/2026

COM1788964486

Loading…

A.I.

COMHAR, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for COMHAR, Inc.

Incidents vs Individual and Family Services Industry Avg (This Year)

COMHAR, Inc. has 28.57% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

COMHAR, Inc. has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types COMHAR, Inc. vs Individual and Family Services Industry Avg (This Year)

COMHAR, Inc. reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - COMHAR, Inc. (X = Date, Y = Severity)

Loading…

SUBSIDIARY

COMHAR, Inc. Subsidiaries

Parent Company

COMHAR, Inc.

Individual and Family Services

Website: http://www.comhar.org

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

COMHAR, Inc. Similar Companies

Home Instead

homeinstead.com

As the world’s leading provider of in-home care, we help older adults live safely and independently at home, without sacrificing their quality of life. Whether they need occasional respite care or full-time support, our Care Pros are carefully selected to provide the best care, giving families peace of mind. With the support of our parent company, Honor Technology, Home Instead is reshaping the aging experience—combining the latest innovations in home care with the compassion that has guided us for over 30 years.

Loading…

NEWS

COMHAR, Inc. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 09, 2023 08:00 AM

Q8 Comhar Pro Standing Desk Review: Bamboo Bling

The Q8 Comhar Pro is a dual-motor electric standing desk with a wide height range, stylish looks, a functional drawer, and charging options including USB and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90461

SUMMARY

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

Published

Date2026-09-11

Updated

Date2026-09-11

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

https://bugs.launchpad.net/ironic/+bug/2162816

CVE-2026-90460

SUMMARY

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens, and trusts) are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived tokens can additionally read credential blobs, exposing TOTP MFA seeds and other secrets. Also, PATCH /v3/credentials does not validate the requested post-update project_id, allowing any delegated token to move a credential to an unauthorized project. All Keystone deployments using delegated authentication are affected.

Published

Date2026-09-11

Updated

Date2026-09-11

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-90457

SUMMARY

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing algorithm used for the same password on another authentication path. A party able to read this file, including a local user or a party with access to a configuration backup, could feasibly recover the underlying password through offline computation, compromising the administrative credential across every path that accepts it.

Published

Date2026-09-11

Updated

Date2026-09-11

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json

CVE-2026-90456

SUMMARY

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that component's administrative interface to anyone aware of the default value.

Published

Date2026-09-11

Updated

Date2026-09-11

RISK INFORMATION (Score: )

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json

CVE-2026-90455

SUMMARY

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed, trusted vendor URL at initialization and does not process attacker-controlled input through the library, limiting practical exploitability of the reintroduced version in this context.

Published

Date2026-09-11

Updated

Date2026-09-11

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

COMHAR, Inc. Vendor Cyber Rating & Cyber Score

COMHAR, Inc. A.I CyberSecurity Scoring

COMHAR, Inc. CyberSecurity News & History

COMHAR, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for COMHAR, Inc.

Incidents vs Individual and Family Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types COMHAR, Inc. vs Individual and Family Services Industry Avg (This Year)

Incident History - COMHAR, Inc. (X = Date, Y = Severity)

COMHAR, Inc. Subsidiaries

Parent Company

COMHAR, Inc.

COMHAR, Inc. Similar Companies

Home Instead

COMHAR, Inc. CyberSecurity News

Q8 Comhar Pro Standing Desk Review: Bamboo Bling

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

COMHAR, Inc. CyberSecurity News & History

COMHAR, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for COMHAR, Inc.

Incidents vs Individual and Family Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types COMHAR, Inc. vs Individual and Family Services Industry Avg (This Year)

Incident History - COMHAR, Inc. (X = Date, Y = Severity)

COMHAR, Inc. Subsidiaries

Parent Company

COMHAR, Inc.

COMHAR, Inc. Similar Companies

Home Instead

COMHAR, Inc. CyberSecurity News

Q8 Comhar Pro Standing Desk Review: Bamboo Bling

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo