Covenant HealthCare Company CyberSecurity Posture
http://www.covenanthealthcare.com
From moms-to-be to babies to great-grandfathers, Covenant HealthCare is the one health system in the Great Lakes Bay Region that delivers extraordinary care across generations and across specialties. As the largest, most comprehensive healthcare provider in the region, you can trust Covenant HealthCare with the health needs of your entire family. We offer a broad spectrum of programs and services ranging from high-risk obstetrics, neonatal and pediatric intensive care, to acute care including a Level II Adult and Pediatric Trauma Center, cardiology, oncology, orthopaedics, robotic surgery and many other services. But as a non-profit, our extraordinary care goes beyond our outstanding medical services. It’s our compassionate and caring team that makes the difference; their support means you always have someone by your side from diagnosis to recovery. We go above and beyond for our patients every day, and in every way. And that extraordinary commitment extends to the communities we serve. Because by working together for a healthier community, we can build a better tomorrow for generations to come. Here’s why more families across the region prefer Covenant HealthCare: We serve 20 counties across northeast and central Michigan We have more than 600 physicians We have more than 20 inpatient and outpatient facilities We have 623 acute care licensed beds We have over 80,000 visits a year in our trauma/emergency care center We are a critical access hospital for seven community hospitals in Michigan's thumb region and in central Michigan We are the largest healthcare employer in the Great Lakes Bay Region We have more than 4,600 employees and 300 volunteers Learn more at: www.CovenantHealthCare.com www.Facebook.com/CovenantHealthCare www.Facebook.com/CovenantKidsMI www.YouTube.com/CovenantHealthCare www.Twitter.com/CovenantSaginaw
Company Details
covenant-healthcare
2,107
8,494
62
http://www.covenanthealthcare.com
0
COV_2568195
In-progress
Covenant HealthCare Risk Score (AI oriented)Between 700 and 749
Covenant HealthCare Global Score (TPRM)XXXX
Description: The employee email accounts of Covenant HealthCare were accessed by an unauthorized party in December 2020. The compromised email accounts contained personal information, specifically names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical diagnosis, and clinical information, medical treatment information, prescription information, doctors’ names, medical record numbers, patient account numbers, and medical insurance information. Covenant HealthCare immediately launched the investigation, took preventive steps and provided direct notice to impacted individuals.
No incidents recorded for Covenant HealthCare in 2025.
No incidents recorded for Covenant HealthCare in 2025.
No incidents recorded for Covenant HealthCare in 2025.
Covenant HealthCare cyber incidents detection timeline including parent company and subsidiaries
From moms-to-be to babies to great-grandfathers, Covenant HealthCare is the one health system in the Great Lakes Bay Region that delivers extraordinary care across generations and across specialties. As the largest, most comprehensive healthcare provider in the region, you can trust Covenant HealthCare with the health needs of your entire family. We offer a broad spectrum of programs and services ranging from high-risk obstetrics, neonatal and pediatric intensive care, to acute care including a Level II Adult and Pediatric Trauma Center, cardiology, oncology, orthopaedics, robotic surgery and many other services. But as a non-profit, our extraordinary care goes beyond our outstanding medical services. It’s our compassionate and caring team that makes the difference; their support means you always have someone by your side from diagnosis to recovery. We go above and beyond for our patients every day, and in every way. And that extraordinary commitment extends to the communities we serve. Because by working together for a healthier community, we can build a better tomorrow for generations to come. Here’s why more families across the region prefer Covenant HealthCare: We serve 20 counties across northeast and central Michigan We have more than 600 physicians We have more than 20 inpatient and outpatient facilities We have 623 acute care licensed beds We have over 80,000 visits a year in our trauma/emergency care center We are a critical access hospital for seven community hospitals in Michigan's thumb region and in central Michigan We are the largest healthcare employer in the Great Lakes Bay Region We have more than 4,600 employees and 300 volunteers Learn more at: www.CovenantHealthCare.com www.Facebook.com/CovenantHealthCare www.Facebook.com/CovenantKidsMI www.YouTube.com/CovenantHealthCare www.Twitter.com/CovenantSaginaw
NYC Health + Hospitals is the nation’s largest public health care delivery system. We are an integrated network of hospitals, trauma centers, neighborhood health centers, nursing homes, and post-acute care centers. We are a home care agency and a health plan, MetroPlus. The health system provides es
OSF HealthCare is an integrated health system founded by The Sisters of the Third Order of St. Francis. Headquartered in Peoria, Illinois, OSF HealthCare has 17 hospitals – 11 acute care, five critical access and one continuing care – with 2,305 licensed beds throughout Illinois and Michigan. OSF e
University Health Network (UHN) is Canada's largest research hospital, which includes Toronto General and Toronto Western Hospitals, Princess Margaret Cancer Centre, the Toronto Rehabilitation Institute and the Michener Institute for Education at UHN. The scope of research and complexity of cases at
NHG Health is a leading public healthcare provider in Singapore recognised for its quality clinical care and its commitment in enabling healthier lives through preventive health, innovative solutions and person-centred programmes tailored to every life stage. Our integrated health system, which span
Advocate Aurora Health and Atrium Health are now Advocate Health – the fifth-largest nonprofit integrated health system in the U.S. Advocate Health is the fifth-largest nonprofit integrated health system in the United States –created from the combination of Advocate Aurora Health and Atrium Health
At Amsterdam UMC, more than 15,000 professionals strive to provide good and accessible care. For the generations of today and tomorrow. The two medical university centers in Amsterdam, AMC and VUmc, are working together towards a future in which we prevent illnesses and make the best treatment avail
HCA Healthcare is dedicated to giving people a healthier tomorrow. As one of the nation’s leading providers of healthcare services, HCA Healthcare is comprised of 188 hospitals and 2,400+ sites of care in 20 states and the United Kingdom. In addition to hospitals, sites of care include surgery cen
Michigan Medicine, based in Ann Arbor, Michigan, is part of one of the world’s leading universities. Michigan Medicine is a premier, highly ranked academic medical center and award-winning health care system with state-of-the-art facilities. Our vision is to create the future of health care throu
Headquartered in Utah with locations in six primary states and additional operations across the western U.S., Intermountain Health is a nonprofit system of 33 hospitals, 400+ clinics, a medical group of more than 4,800 employed physicians and advanced care providers, a health plan division called Se
.png)
UPDATE: Police say Martinez has been found safe Friday evening. Thanks to everyone who helped spread the word.
LUBBOCK, Texas (KCBD) - Covenant Hospital in Levelland was struck by lightning Tuesday night, according to City of Levelland emergency...
Central Michigan University says a historic fundraising gift of $79 million will help support students and address health care needs.
More than 2200 Granite Staters may have been affected by a data breach at Covenant Health, the parent company of St. Joseph Hospital,...
An investigation revealed that nearly 8000 patients' information was stolen. That number includes almost 5000 Mainers.
Covenant Health, an Andover, ME-based Catholic healthcare provider serving New England and parts of Pennsylvania, is dealing with a cyberattack that has been...
Shamis & Gentile PA, one of the nation's premier class action law firms specializing in data breach cases, is investigating the Covenant Health, Inc. data...
The parent company of St. Joseph Hospital, Covenant Health, issued a warning that a cybersecurity incident in May might have compromised patients' names and...
Effective Sept. 1, 2025, Texas SB 1318 adds stricter limits to healthcare non-competes, including buyout caps, duration, and new rules for...
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Covenant HealthCare is http://www.covenanthealthcare.com.
According to Rankiteo, Covenant HealthCare’s AI-generated cybersecurity score is 744, reflecting their Moderate security posture.
According to Rankiteo, Covenant HealthCare currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Covenant HealthCare is not certified under SOC 2 Type 1.
According to Rankiteo, Covenant HealthCare does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Covenant HealthCare is not listed as GDPR compliant.
According to Rankiteo, Covenant HealthCare does not currently maintain PCI DSS compliance.
According to Rankiteo, Covenant HealthCare is not compliant with HIPAA regulations.
According to Rankiteo,Covenant HealthCare is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Covenant HealthCare operates primarily in the Hospitals and Health Care industry.
Covenant HealthCare employs approximately 2,107 people worldwide.
Covenant HealthCare presently has no subsidiaries across any sectors.
Covenant HealthCare’s official LinkedIn profile has approximately 8,494 followers.
Covenant HealthCare is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.
No, Covenant HealthCare does not have a profile on Crunchbase.
Yes, Covenant HealthCare maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/covenant-healthcare.
As of November 27, 2025, Rankiteo reports that Covenant HealthCare has experienced 1 cybersecurity incidents.
Covenant HealthCare has an estimated 29,963 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with preventive steps taken, and communication strategy with direct notice to impacted individuals..
Title: Covenant HealthCare Email Account Breach
Description: The employee email accounts of Covenant HealthCare were accessed by an unauthorized party in December 2020. The compromised email accounts contained personal information, specifically names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical diagnosis and clinical information, medical treatment information, prescription information, doctors’ names, medical record numbers, patient account numbers, and medical insurance information. Covenant HealthCare immediately launched the investigation, took preventive steps and provided direct notice to impacted individuals.
Date Detected: December 2020
Type: Data Breach
Attack Vector: Unauthorized Email Access
Common Attack Types: The most common types of attacks the company has faced is Breach.
Data Compromised: Names, Addresses, Dates of birth, Social security numbers, Driver’s license numbers, Medical diagnosis and clinical information, Medical treatment information, Prescription information, Doctors’ names, Medical record numbers, Patient account numbers, Medical insurance information
Systems Affected: Email Accounts
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Addresses, Dates Of Birth, Social Security Numbers, Driver’S License Numbers, Medical Diagnosis And Clinical Information, Medical Treatment Information, Prescription Information, Doctors’ Names, Medical Record Numbers, Patient Account Numbers, Medical Insurance Information and .
Entity Name: Covenant HealthCare
Entity Type: Healthcare Provider
Industry: Healthcare
Incident Response Plan Activated: True
Containment Measures: Preventive Steps Taken
Communication Strategy: Direct Notice to Impacted Individuals
Type of Data Compromised: Names, Addresses, Dates of birth, Social security numbers, Driver’s license numbers, Medical diagnosis and clinical information, Medical treatment information, Prescription information, Doctors’ names, Medical record numbers, Patient account numbers, Medical insurance information
Sensitivity of Data: High
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by preventive steps taken.
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Direct Notice to Impacted Individuals.
Most Recent Incident Detected: The most recent incident detected was on December 2020.
Most Significant Data Compromised: The most significant data compromised in an incident were Names, Addresses, Dates of Birth, Social Security Numbers, Driver’s License Numbers, Medical Diagnosis and Clinical Information, Medical Treatment Information, Prescription Information, Doctors’ Names, Medical Record Numbers, Patient Account Numbers, Medical Insurance Information and .
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Preventive Steps Taken.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Medical Record Numbers, Names, Driver’s License Numbers, Addresses, Social Security Numbers, Doctors’ Names, Patient Account Numbers, Medical Insurance Information, Medical Treatment Information, Prescription Information, Medical Diagnosis and Clinical Information and Dates of Birth.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rapid