Comparison Overview
Covered California
Covered California
1601 Exposition Blvd, Sacramento, US
Last Update: 03/03/2026
We’re not a health insurance company. We’re Californians making healthcare work for Californians. Open Enrollment is here. Enroll by December 31
Marsh McLennan Agency
360 Hamilton Ave, White Plains, US
Last Update: 03/04/2026
Marsh McLennan Agency, a business of Marsh (NYSE: MRSH), is a leading provider of business insurance, employee health & benefits, retirement & wealth, and private client insurance solutions across the US and Canada. Marsh is a global leader in risk, reinsurance and capi...
Compliance Ranges Comparison
Covered California
Marsh McLennan Agency
Benchmark & Cyber Underwriting Signals
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Covered California in 2026.
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Marsh McLennan Agency in 2026.
Incident History - Covered California (X = Date, Y = Severity)
Covered California cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marsh McLennan Agency (X = Date, Y = Severity)
Marsh McLennan Agency cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Covered California
Marsh McLennan Agency
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.