What is HHS OASH Office of Disease Prevention and Health Promotion's cybersecurity risk score?

HHS OASH Office of Disease Prevention and Health Promotion has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has HHS OASH Office of Disease Prevention and Health Promotion experienced?

According to Rankiteo, HHS OASH Office of Disease Prevention and Health Promotion currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HHS OASH Office of Disease Prevention and Health Promotion been affected by any supply chain cyber incidents ?

According to Rankiteo, HHS OASH Office of Disease Prevention and Health Promotion has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HHS OASH Office of Disease Prevention and Health Promotion have SOC 2 Type 2 certification ?

According to Rankiteo, HHS OASH Office of Disease Prevention and Health Promotion does not hold a SOC 2 Type 2 certification.

Does HHS OASH Office of Disease Prevention and Health Promotion have PCI DSS certification ?

According to Rankiteo, HHS OASH Office of Disease Prevention and Health Promotion does not currently maintain PCI DSS compliance.

Does HHS OASH Office of Disease Prevention and Health Promotion have ISO 27001 certification ?

According to Rankiteo,HHS OASH Office of Disease Prevention and Health Promotion is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

How many employees does HHS OASH Office of Disease Prevention and Health Promotion have ?

HHS OASH Office of Disease Prevention and Health Promotion employs approximately None employees people worldwide.

Does HHS OASH Office of Disease Prevention and Health Promotion own any subsidiaries ?

HHS OASH Office of Disease Prevention and Health Promotion presently has no subsidiaries across any sectors.

How many LinkedIn followers does HHS OASH Office of Disease Prevention and Health Promotion have ?

HHS OASH Office of Disease Prevention and Health Promotion's official LinkedIn profile has approximately 1,427 followers.

What is the NAICS classification code for HHS OASH Office of Disease Prevention and Health Promotion ?

HHS OASH Office of Disease Prevention and Health Promotion is classified under the NAICS code 92, which corresponds to Public Administration.

Does HHS OASH Office of Disease Prevention and Health Promotion have a Crunchbase profile ?

No, HHS OASH Office of Disease Prevention and Health Promotion does not have a profile on Crunchbase.

Does HHS OASH Office of Disease Prevention and Health Promotion have a LinkedIn profile ?

Yes, HHS OASH Office of Disease Prevention and Health Promotion maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hhs-odphp.

How many peer or competitor companies does HHS OASH Office of Disease Prevention and Health Promotion have ?

HHS OASH Office of Disease Prevention and Health Promotion has an estimated 13,299 peer or competitor companies worldwide.

What types of cybersecurity incidents has HHS OASH Office of Disease Prevention and Health Promotion faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach, Cyber Attack and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HOODPHP

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

HHS OASH Office of Disease Prevention and Health Promotion Vendor Cyber Rating & Cyber Score

health.gov

Add Your Compliance Badge

The Office of Disease Prevention and Health Promotion (ODPHP) encourages all Americans to lead healthy and active lives. We accomplish this by establishing and promoting national public health priorities, translating science into policy, guidance, and tools, and working to improve health literacy and equitable access to clear and actionable health information. As part of the U.S. Department of Health and Human Services under the Office of the Assistant Secretary for Health, ODPHP sets priorities for improving the nation’s health, provides science-based nutrition and physical activity guidance, and creates tools and resources to help people make healthy choices. Across our national health initiatives like Healthy People 2030, the

HOODPHP A.I CyberSecurity Scoring

Scoring History

HOODPHP

HHS OASH Office of Disease Prevention and Health Promotion CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Department of ...

Cyber Attack

100

8/2026

HHSUSD178779097...

U.S. Department of ...

Breach

2/2026

HHS1771281140

HHS OASH Office of ...

Ransomware

100

6/2025

HHS821061925

U.S. Department of ...

Breach

1/2025

BAKHHS177457831...

U.S. Department of ...

Breach

1/2025

HHS1772059552

HHS OASH Office of ...

Breach

100

12/2023

HHS002070924

U.S. Department of ...

Data Leak

07/2023

USD24024723

U.S. Department of ...

Data Leak

4/2020

USD142925623

HHS OASH Office of ...

Data Leak

03/2019

USD54141223

Loading…

A.I.

HOODPHP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HOODPHP

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for HHS OASH Office of Disease Prevention and Health Promotion in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HHS OASH Office of Disease Prevention and Health Promotion in 2026.

Incident Types HOODPHP vs Government Administration Industry Avg (This Year)

No incidents recorded for HHS OASH Office of Disease Prevention and Health Promotion in 2026.

Incident History - HOODPHP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HHS OASH Office of Disease Prevention and Health Promotion Subsidiaries

HOODPHP

Government Administration

Website: http://odphp.health.gov

Company Size: 10,001+ employees

HHS CareersGovernment Administration

U.S. Department of Health and Human Services (HHS)Government Administration

HHS Office of Inspector GeneralGovernment Administration

Administration for Children and Families (ACF)Government Administration

Office on Trafficking in PersonsGovernment Administration

Child Welfare Information GatewayHealth and Human Services

Capacity Building Center for StatesGovernment Administration

Office of Human Services Emergency Preparedness and Response (OHSEPR)Government Administration

RHY ProgramIndividual and Family Services

Health Profession Opportunity Grants (HPOG)Government Administration

PeerTAGovernment Administration

HHS Office of the SecretaryGovernment Administration

Office of Infectious Disease and HIV/AIDS PolicyGovernment Administration

HHS Office of Small and Disadvantaged Business Utilization (HHS OSDBU)Government Relations Services

Medical Reserve CorpsGovernment Administration

HHS Access2SuccessGovernment Relations

Office of the Assistant Secretary for Health (OASH)Government Administration

Office for Human Research Protections (OHRP), United States Department of Health and Human ServicesGovernment Administration

HHS Office of Population Affairs (OPA)Government Administration

Loading…

HHS OASH Office of Disease Prevention and Health Promotion Similar Companies

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

I work for NSW

nsw.gov.au

The NSW public sector includes ten departments and many agencies and organisations working together to develop policy and deliver important services such as health, education, housing, transport and infrastructure across NSW. We are over 300,000 dedicated people who share the same values - making a difference, giving back and responding to the future. Read our community guidelines: bit.ly/PD-community-guidelines

State of California

ca.gov

Californians deserve a government that works for them and with them. One that will work to ensure opportunity and justice. We are building a California not for the few, but for all — including those who have historically been left out. We are doing the work to make our state a place for every Californian and all the diversity that makes us strong. Our state will be known as a place where everyone is respected, protected, and connected.

City of Philadelphia

phila.gov

With a workforce of 30,000 people, and opportunities in 1,000 different job categories, the City of Philadelphia is one of the largest employers in Southeastern Pennsylvania. As an employer, we operate through the guiding principles of service, integrity, respect, accountability, collaboration, diversity and inclusion. We strive to effectively deliver services, to resolve the challenges facing our city, and to make Philadelphia a place where all of our residents have the opportunity to reach their potential. To learn more about job opportunities, visit www.phila.gov or follow #PHLCityJobs.

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

Government of Canada

canada.ca

The Government of Canada works on behalf of Canadians, both at home and abroad. Visit www.Canada.ca to learn more. Canada’s professional, non-partisan public service is among the best in the world, and many of its departments and agencies place in Canada’s Top 100 Employers year after year. If you are interested in joining our diverse and innovative team, visit www.jobs.gc.ca for information and opportunities. Terms: https://www.canada.ca/en/transparency/terms.html Le gouvernement du Canada œuvre au nom des Canadiens, tant au pays qu’à l’étranger. Consultez le site www.canada.ca pour en savoir plus. Impartiale et professionnelle, la fonction publique du Canada fait partie de l’élite mondiale. Bon nombre de ses ministères et organismes figurent parmi les 100 meilleurs employeurs du pays année après année. Vous aimeriez intégrer notre équipe diversifiée et innovante? Rendez-vous au www.emplois.gc.ca pour obtenir des informations et connaître les possibilités qui s’offrent à vous. Avis : https://www.canada.ca/fr/transparence/avis.html

IBGE

ibge.gov.br

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

Loading…

NEWS

HHS OASH Office of Disease Prevention and Health Promotion CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 16, 2025 08:00 AM

Cracks in the Enamel- The Ascendance of Federal and State Action to Restrict Fluoride Use

Learn about federal and state actions to restrict fluoride use in public drinking water and ingestible drug products, including Utah and...

Read Article

October 21, 2025 07:00 AM

Murray, Schumer, Sanders, Baldwin, Colleagues Blast Latest HHS Firings—Underscoring How Cuts Will Gravely Weaken Work to Tackle Fentanyl Crisis, Address Maternal Mortality, & Much More

31 Democratic senators lay out how Trump and RFK Jr.'s latest, illegal mass firings will make America less healthy.

Read Article

October 10, 2025 07:00 AM

Trump’s promised shutdown layoffs lead to at least 4,200 cuts at seven agencies

More RIFs possible as the Trump administration is following through on its threat to leverage the shutdown to implement federal workforce...

Read Article

June 12, 2025 07:00 AM

HHS FY 2026 Budget Reflects Recent Department Actions and Priorities

HHS requests $94.7B in FY 2026 discretionary budget authority, a $31.3B decrease from the FY 2025 enacted level.

Read Article

May 05, 2025 07:00 AM

White House Budget Documents Provide Additional Insights into the Trump Administration’s Priorities for HHS

Over the past few weeks, we have been closely following the Trump administration's restructuring of the Department of Health and Human...

Read Article

September 24, 2020 12:49 AM

Careers

HHS OIG is ranked one of the top places to work in the Federal Government. We are the #1 Best Place to Work within the Department Health and Human Services...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…