Comparison Overview

Healthfirst

VS

Amil

Healthfirst

100 Church Street, New York, NY, 10007, US
Last Update: 2025-05-03 (UTC)
Between 800 and 900
http://www.healthfirst.org

Strong

Healthfirst believes that every New Yorker deserves access to the best available healthcare. As one of New York’s highest quality not-for-profit health insurers serving close to two million New Yorkers, we make this a reality for our members. Founded more than 30 years ago by the leading hospital systems in downstate New York, Healthfirst established a partnership model that enables hospitals, health systems, and physicians in our network to prioritize health outcomes over profits, placing the needs of our members and community first. We are dedicated to promoting health equity so that all individuals, regardless of race, neighborhood, or income, can thrive and live healthy, fulfilling lives. Healthfirst serves members in New York City, on Long Island, and in Westchester, Rockland, Sullivan, and Orange counties, offering market-leading products to suit every life stage. Our offerings include Medicaid plans, Medicare Advantage plans, Child Health Plus plans, Essential Plans, Long-Term Care plans, and Qualified Health plans. For more information on Healthfirst, please visit healthfirst.org.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 5,016
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Amil

Rua Arquiteto Olavo Redig de Campos, 105, Bloco B, São Paulo, São Paulo, 04711-905, BR
Last Update: 2025-03-08 (UTC)

Strong

Between 800 and 900
https://amil.com.br

A Amil é uma empresa do setor de saúde que atua no Brasil combinando expertise e liderança para coordenar todos os agentes desse mercado - criando relações sustentáveis para conhecer e atender às necessidades de cada cliente e permitir que ele aproveite o melhor da vida. Diariamente, nos preocupamos em utilizar o melhor da nossa criatividade e foco, oferecendo transparência, eficiência, inovação e acolhimento tanto para a área na qual atuamos quanto aos nossos clientes e a sociedade em geral. Por isso, apresentamos diversas linhas de serviços. Líder no segmento premium, a Amil One alia conveniência e exclusividade para entregar a melhor experiência em saúde e bem-estar. Amil Fácil, criada com os conceitos de simplicidade, eficiência e cuidado, oferece planos regionais com excelente custo-benefício. Já a Amil Dental conta com uma ampla rede de dentistas, com acesso rápido e fácil, além de contratação totalmente online. Somos a operadora que mais inovou no setor de saúde, ajudando a moldar esse mercado no Brasil - e estamos dispostos a fazer com que esse setor funcione cada vez melhor para todos. ANS nº 326305 Siga-nos em nossas demais redes sociais: Facebook: https://www.facebook.com/amil Instagram: https://www.instagram.com/amilcuidadocerto/ YouTube: https://www.youtube.com/amilinstitucional TikTok: https://www.tiktok.com/@amil

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 11,007
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/healthfirst.jpeg
Healthfirst
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/amil.jpeg
Amil
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Healthfirst
100%
Compliance Rate
0/4 Standards Verified
Amil
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Healthfirst in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Amil in 2025.

Incident History — Healthfirst (X = Date, Y = Severity)

Healthfirst cyber incidents detection timeline including parent company and subsidiaries

Incident History — Amil (X = Date, Y = Severity)

Amil cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/healthfirst.jpeg
Healthfirst
Incidents

No Incident

https://images.rankiteo.com/companyimages/amil.jpeg
Amil
Incidents

No Incident

FAQ

Both Healthfirst company and Amil company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Amil company has disclosed a higher number of cyber incidents compared to Healthfirst company.

In the current year, Amil company and Healthfirst company have not reported any cyber incidents.

Neither Amil company nor Healthfirst company has reported experiencing a ransomware attack publicly.

Neither Amil company nor Healthfirst company has reported experiencing a data breach publicly.

Neither Amil company nor Healthfirst company has reported experiencing targeted cyberattacks publicly.

Neither Healthfirst company nor Amil company has reported experiencing or disclosing vulnerabilities publicly.

Amil company has more subsidiaries worldwide compared to Healthfirst company.

Amil company employs more people globally than Healthfirst company, reflecting its scale as a Hospitals and Health Care.

Latest Global CVEs (Not Company-Specific)

Description

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Description

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the file /admin/voters_add.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References