What is the official website of HealthStream ?

The official website of HealthStream is https://www.healthstream.com/.

What is HealthStream's cybersecurity risk score?

HealthStream has an AI-generated cybersecurity risk score of 680 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has HealthStream experienced?

According to Rankiteo, HealthStream currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HealthStream been affected by any supply chain cyber incidents ?

According to Rankiteo, HealthStream has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HealthStream have SOC 2 Type 1 certification ?

According to Rankiteo, HealthStream is not certified under SOC 2 Type 1.

Does HealthStream have SOC 2 Type 2 certification ?

According to Rankiteo, HealthStream does not hold a SOC 2 Type 2 certification.

Does HealthStream comply with GDPR ?

According to Rankiteo, HealthStream is not listed as GDPR compliant.

Does HealthStream have PCI DSS certification ?

According to Rankiteo, HealthStream does not currently maintain PCI DSS compliance.

Does HealthStream comply with HIPAA ?

According to Rankiteo, HealthStream is not compliant with HIPAA regulations.

Does HealthStream have ISO 27001 certification ?

According to Rankiteo,HealthStream is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HealthStream operate in ?

HealthStream operates primarily in the Software Development industry.

How many employees does HealthStream have ?

HealthStream employs approximately 1,336 people worldwide.

Does HealthStream own any subsidiaries ?

HealthStream presently has no subsidiaries across any sectors.

How many LinkedIn followers does HealthStream have ?

HealthStream's official LinkedIn profile has approximately 34,473 followers.

What is the NAICS classification code for HealthStream ?

HealthStream is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does HealthStream have a Crunchbase profile ?

No, HealthStream does not have a profile on Crunchbase.

Does HealthStream have a LinkedIn profile ?

Yes, HealthStream maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/healthstream.

How many cybersecurity incidents has HealthStream experienced ?

As of October 22, 2026, Rankiteo reports that HealthStream has experienced 2 cybersecurity incidents.

How many peer or competitor companies does HealthStream have ?

HealthStream has an estimated 31,167 peer or competitor companies worldwide.

What types of cybersecurity incidents has HealthStream faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HealthStream

Boost Score +25 with badge (5 left)

680

/1000

Weak

705

/1000

Moderate

HealthStream Vendor Cyber Rating & Cyber Score

healthstream.com

Add Your Compliance Badge

HealthStream (NASDAQ: HSTM) is dedicated to improving patient outcomes through the development of healthcare organizations' greatest asset: their people. Our unified suite of solutions is contracted by, collectively, approximately 4.8 million healthcare employees in the U.S. for workforce development, training & learning management, talent management, credentialing, privileging, provider enrollment, performance assessment, and managing simulation-based education programs.

HealthStream

HealthStream CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

HealthStream

Breach

9/2026

HEA1789497095

HealthStream

Data Leak

04/2018

HEA337251223

Loading…

A.I.

HealthStream Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HealthStream

Incidents vs Software Development Industry Avg (This Year)

HealthStream has 3.85% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

HealthStream has 0.99% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types HealthStream vs Software Development Industry Avg (This Year)

HealthStream reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - HealthStream (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HealthStream Subsidiaries

Parent Company

HealthStream

Software Development

Website: https://www.healthstream.com/

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

HealthStream Similar Companies

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

GoTo Group

gotocompany.com

GoTo is the largest technology group in Indonesia, combining on-demand and financial services through the Gojek and GoTo Financial brands. It is the first platform in Southeast Asia to host these two essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure. GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on four continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and Cox Fleet®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately owned, Atlanta-based company with $23 billion in annual revenue. Cox Automotive has been included on Glassdoor’s Best Companies in Tech & AI 2026 and Best Place to Work in 2026 lists.

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

Sage

sage.com

At Sage, we knock down barriers with information, insights, and tools to help your business flow. We provide businesses with software and services that are simple and easy to use, as we work with you to give you that feeling of confidence. Customers trust our Payroll, HR, and Finance software to make business flow with ease. From our local network of experts to our ever-growing partnerships, we are on hand to give you all the insights you need to thrive. 💚

Upwork

upwork.com

Upwork is the world’s work marketplace that connects businesses with independent talent from across the globe. We serve everyone from one-person startups to large, Fortune 100 enterprises with a powerful, trust-driven platform that enables companies and talent to work together in new ways that unlock their potential. Our talent community on Upwork encompasses more than 10,000 skills in categories including website & app development, creative & design, customer support, finance & accounting, consulting, and operations.

Cadence

cadence.com

Cadence is a market leader in AI and digital twins, pioneering the application of computational software to accelerate innovation in the engineering design of silicon to systems. Our design solutions, based on Cadence’s Intelligent System Design™ strategy, are essential for the world’s leading semiconductor and systems companies to build their next-generation products from chips to full electromechanical systems that serve a wide range of markets, including hyperscale computing, mobile communications, automotive, aerospace, industrial, life sciences and robotics. In 2024, Cadence was recognized by the Wall Street Journal as one of the world’s top 100 best-managed companies. Cadence solutions offer limitless opportunities—learn more at www.cadence.com.

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

Loading…

NEWS

HealthStream CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 06, 2026 08:00 AM

Curve Dental Recognized as Cloud-Native Leader in HealthStream Ventures' 2026 Dental Technology Landscape Report

PRNewswire/ -- Curve Dental®, the leading cloud-native, all-in-one dental practice management platform, today announced its recognition as a...

Read Article

May 13, 2025 07:00 AM

H3PT Announces 2025 Council Members, Elevating Healthcare Security and Third-Party Risk Management Standards Amid HIPAA Security 2.0 Advancements

PRNewswire/ -- The Health 3rd Party Trust Initiative (H3PT) proudly announces the selection of its 2025 Council Members, a distinguished...

Read Article

March 11, 2025 07:00 AM

HealthStream Announces the Addition of Charles E. Beard, Jr. to the Board of Directors

NASHVILLE, Tenn., March 11, 2025--HealthStream, Inc. (Nasdaq: HSTM), a leading healthcare technology platform company for workforce...

Read Article

March 31, 2020 07:00 AM

Cybersecurity training required for Augusta University employees

Cybersecurity awareness training is a critical tool in the University System of Georgia's efforts to keep our information safe and secure.

Read Article

March 09, 2020 07:00 AM

HealthStream pays $25M to acquire Portland startup NurseGrid, maker of a mobile app for nurses

Publicly-traded healthcare company HealthStream has acquired NurseGrid, a Portland, Ore.-based startup that develops software and apps for...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-113705

SUMMARY

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called 713b943af94ab2d521d483b841618b97a2e78a4d. A patch should be applied to remediate this issue.

Published

Date2026-10-20

Updated

Date2026-10-20

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:N/A:N

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-9825

SUMMARY

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

Published

Date2026-10-20

Updated

Date2026-10-20

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://www.ibm.com/support/pages/node/7290671

CVE-2026-94402

SUMMARY

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.

Published

Date2026-10-20

Updated

Date2026-10-20

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

2.8

REFERENCES

https://www.ibm.com/support/pages/node/7291785

CVE-2026-93888

SUMMARY

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

Published

Date2026-10-20

Updated

Date2026-10-20

RISK INFORMATION (Score: 7.8)

cvss3

Base Score: 7.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.8

REFERENCES

https://www.ibm.com/support/pages/node/7292127

CVE-2026-93744

SUMMARY

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.

Published

Date2026-10-20

Updated

Date2026-10-20

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

https://www.ibm.com/support/pages/node/7292223

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

HealthStream Vendor Cyber Rating & Cyber Score

HealthStream A.I CyberSecurity Scoring

HealthStream CyberSecurity News & History

HealthStream Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HealthStream

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HealthStream vs Software Development Industry Avg (This Year)

Incident History - HealthStream (X = Date, Y = Severity)

HealthStream Subsidiaries

Parent Company

HealthStream

HealthStream Similar Companies

PedidosYa

GoTo Group

Cox Automotive Inc.

Meta

Zoho

Sage

Upwork

Cadence

Pitney Bowes

HealthStream CyberSecurity News

Curve Dental Recognized as Cloud-Native Leader in HealthStream Ventures' 2026 Dental Technology Landscape Report

H3PT Announces 2025 Council Members, Elevating Healthcare Security and Third-Party Risk Management Standards Amid HIPAA Security 2.0 Advancements

HealthStream Announces the Addition of Charles E. Beard, Jr. to the Board of Directors

Cybersecurity training required for Augusta University employees

HealthStream pays $25M to acquire Portland startup NurseGrid, maker of a mobile app for nurses

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

HealthStream CyberSecurity News & History

HealthStream Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HealthStream

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HealthStream vs Software Development Industry Avg (This Year)

Incident History - HealthStream (X = Date, Y = Severity)

HealthStream Subsidiaries

Parent Company

HealthStream

HealthStream Similar Companies

PedidosYa

GoTo Group

Cox Automotive Inc.

Meta

Zoho

Sage

Upwork

Cadence

Pitney Bowes

HealthStream CyberSecurity News

Curve Dental Recognized as Cloud-Native Leader in HealthStream Ventures' 2026 Dental Technology Landscape Report

H3PT Announces 2025 Council Members, Elevating Healthcare Security and Third-Party Risk Management Standards Amid HIPAA Security 2.0 Advancements

HealthStream Announces the Addition of Charles E. Beard, Jr. to the Board of Directors

Cybersecurity training required for Augusta University employees

HealthStream pays $25M to acquire Portland startup NurseGrid, maker of a mobile app for nurses

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo