Comparison Overview

Emergency Medical Services Authority (EMSA)

VS

Express Scripts by Evernorth

Emergency Medical Services Authority (EMSA)

US
Last Update: 2025-12-17
Between 600 and 649

EMSA - the Emergency Medical Services Authority - is Oklahoma's largest provider of pre-hospital emergency medical care. We provide ambulance service to more than 1.1 million residents in central and northeast Oklahoma. EMSA was established in Tulsa in 1977 and later expanded to include Bixby, Jenks and Sand Springs. EMSA began providing service to Oklahoma City in 1990.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 286
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
2

Express Scripts by Evernorth

1 Express Way, St. Louis, MO, 63121, US
Last Update: 2025-12-17

Express Scripts by Evernorth provides pharmacy benefits services with a clear mission: To simplify complexities and provide holistic, condition-focused care and clinically superior pharmacy benefit solutions for our clients and the people they serve. Guided by our core values of service, patient care, innovation and partnership, we are driven to solve the problems others don’t, won’t or can’t. Right for today. Right for tomorrow. Right by your side.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 13,271
Subsidiaries: 2
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Emergency Medical Services Authority (EMSA)
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/express-scripts.jpeg
Express Scripts by Evernorth
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Emergency Medical Services Authority (EMSA)
100%
Compliance Rate
0/4 Standards Verified
Express Scripts by Evernorth
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Emergency Medical Services Authority (EMSA) in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Express Scripts by Evernorth in 2025.

Incident History — Emergency Medical Services Authority (EMSA) (X = Date, Y = Severity)

Emergency Medical Services Authority (EMSA) cyber incidents detection timeline including parent company and subsidiaries

Incident History — Express Scripts by Evernorth (X = Date, Y = Severity)

Express Scripts by Evernorth cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
Emergency Medical Services Authority (EMSA)
Incidents

Date Detected: 6/2024
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 2/2024
Type:Ransomware
Attack Vector: Unauthorized Network Access
Blog: Blog
https://images.rankiteo.com/companyimages/express-scripts.jpeg
Express Scripts by Evernorth
Incidents

Date Detected: 4/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 3/2012
Type:Breach
Attack Vector: Email
Blog: Blog

FAQ

Express Scripts by Evernorth company demonstrates a stronger AI Cybersecurity Score compared to Emergency Medical Services Authority (EMSA) company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Emergency Medical Services Authority (EMSA) and Express Scripts by Evernorth have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Express Scripts by Evernorth company and Emergency Medical Services Authority (EMSA) company have not reported any cyber incidents.

Emergency Medical Services Authority (EMSA) company has confirmed experiencing a ransomware attack, while Express Scripts by Evernorth company has not reported such incidents publicly.

Both Express Scripts by Evernorth company and Emergency Medical Services Authority (EMSA) company have disclosed experiencing at least one data breach.

Neither Express Scripts by Evernorth company nor Emergency Medical Services Authority (EMSA) company has reported experiencing targeted cyberattacks publicly.

Neither Emergency Medical Services Authority (EMSA) company nor Express Scripts by Evernorth company has reported experiencing or disclosing vulnerabilities publicly.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds any compliance certifications.

Neither company holds any compliance certifications.

Express Scripts by Evernorth company has more subsidiaries worldwide compared to Emergency Medical Services Authority (EMSA) company.

Express Scripts by Evernorth company employs more people globally than Emergency Medical Services Authority (EMSA) company, reflecting its scale as a Hospitals and Health Care.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds SOC 2 Type 1 certification.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds SOC 2 Type 2 certification.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds ISO 27001 certification.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds PCI DSS certification.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds HIPAA certification.

Neither Emergency Medical Services Authority (EMSA) nor Express Scripts by Evernorth holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X