What is the official website of Hillcrest HealthCare System ?

The official website of Hillcrest HealthCare System is http://www.hillcrest.com.

What is Hillcrest HealthCare System's cybersecurity risk score?

Hillcrest HealthCare System has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Hillcrest HealthCare System experienced?

According to Rankiteo, Hillcrest HealthCare System currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hillcrest HealthCare System been affected by any supply chain cyber incidents ?

According to Rankiteo, Hillcrest HealthCare System has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Hillcrest HealthCare System have SOC 2 Type 1 certification ?

According to Rankiteo, Hillcrest HealthCare System is not certified under SOC 2 Type 1.

Does Hillcrest HealthCare System have SOC 2 Type 2 certification ?

According to Rankiteo, Hillcrest HealthCare System does not hold a SOC 2 Type 2 certification.

Does Hillcrest HealthCare System comply with GDPR ?

According to Rankiteo, Hillcrest HealthCare System is not listed as GDPR compliant.

Does Hillcrest HealthCare System have PCI DSS certification ?

According to Rankiteo, Hillcrest HealthCare System does not currently maintain PCI DSS compliance.

Does Hillcrest HealthCare System comply with HIPAA ?

According to Rankiteo, Hillcrest HealthCare System is not compliant with HIPAA regulations.

Does Hillcrest HealthCare System have ISO 27001 certification ?

According to Rankiteo,Hillcrest HealthCare System is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hillcrest HealthCare System operate in ?

Hillcrest HealthCare System operates primarily in the Hospitals and Health Care industry.

How many employees does Hillcrest HealthCare System have ?

Hillcrest HealthCare System employs approximately 3,957 people worldwide.

Does Hillcrest HealthCare System own any subsidiaries ?

Hillcrest HealthCare System presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hillcrest HealthCare System have ?

Hillcrest HealthCare System's official LinkedIn profile has approximately 17,742 followers.

What is the NAICS classification code for Hillcrest HealthCare System ?

Hillcrest HealthCare System is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Hillcrest HealthCare System have a Crunchbase profile ?

No, Hillcrest HealthCare System does not have a profile on Crunchbase.

Does Hillcrest HealthCare System have a LinkedIn profile ?

Yes, Hillcrest HealthCare System maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hillcrest-healthcare-system.

How many cybersecurity incidents has Hillcrest HealthCare System experienced ?

As of July 14, 2026, Rankiteo reports that Hillcrest HealthCare System has experienced 4 cybersecurity incidents.

How many peer or competitor companies does Hillcrest HealthCare System have ?

Hillcrest HealthCare System has an estimated 33,297 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hillcrest HealthCare System faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HHS

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

Hillcrest HealthCare System Vendor Cyber Rating & Cyber Score

hillcrest.com

Add Your Compliance Badge

Hillcrest HealthCare System is changing lives for the better, together. Serving eastern Oklahoma, the system includes: - 8 hospitals: Hillcrest Medical Center, Hillcrest Hospital South, Tulsa Spine & Specialty Hospital, Bailey Medical Center, Hillcrest Hospital Cushing, Hillcrest Hospital Claremore, Hillcrest Hospital Henryetta, Hillcrest Hospital Pryor - 2 physician groups: Oklahoma Heart Institute and Utica Park Clinic - 4,600 employees - 489 employed providers - 1,173 licensed beds - Nearly 500,000 outpatient visits per year - More than 130,000 ER visits per year

HHS A.I CyberSecurity Scoring

Scoring History

HHS

Hillcrest HealthCare System CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Hillcrest HealthCar...

Ransomware

12/2023

ARD2306224

Hillcrest HealthCar...

Breach

100

11/2023

BSA2396224

Hillcrest HealthCar...

Ransomware

11/2023

LOV7215224

Hillcrest HealthCar...

Breach

100

11/2023

UTH71515224

Loading…

A.I.

HHS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HHS

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Hillcrest HealthCare System in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hillcrest HealthCare System in 2026.

Incident Types HHS vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Hillcrest HealthCare System in 2026.

Incident History - HHS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hillcrest HealthCare System Subsidiaries

HHS

Hospitals and Health Care

Website: http://www.hillcrest.com

Company Size: 3,957

Ardent HealthHospitals and Health Care

UT Health East TexasHospitals and Health Care

Lovelace Health SystemHospitals and Health Care

BSA Health SystemHospitals and Health Care

Mountainside Medical CenterHospitals and Health Care

The University of Kansas Health System St. Francis CampusHospitals and Health Care

Pascack Valley Medical CenterHospitals and Health Care

Seton Medical Center Harker HeightsHospitals and Health Care

Physicians Surgical Hospitals, L.L.C.Hospitals and Health Care

Ardent HealthHospitals and Health Care

Loading…

Hillcrest HealthCare System Similar Companies

Aurora Health Care

cb aah.org

Aurora Health Care is proud to be a part of Advocate Health, the third-largest nonprofit integrated health system in the U.S. Advocate Health is the third-largest nonprofit, integrated health system in the United States, created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois; Atrium Health in the Carolinas, Georgia and Alabama; and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care. Headquartered in Charlotte, North Carolina, Advocate Health services nearly 6 million patients and is engaged in hundreds of clinical trials and research studies, with Wake Forest University School of Medicine serving as the academic core of the enterprise. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 68 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to providing equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social

UCSF Health

ucsfhealth.org

UCSF Health is an integrated health care network encompassing several entities, including UCSF Medical Center, one of the nation’s top 10 hospitals according to U.S. News & World Report, and UCSF Benioff Children’s Hospitals, with campuses in Oakland and San Francisco. We are recognized throughout the world for our innovative patient care, advanced technology and pioneering research. For more than a century, we have offered the highest quality medical treatment. Today, our expertise covers virtually all specialties, from cancer to women's health. In addition, the compassionate care provided by our doctors, nurses and other staff is a key to our success. Our services generate about 1.1 million patient visits to our clinics a year and $3.2 billion in annual revenue. We have 12,000 employees and dozens of locations throughout San Francisco as well as outreach clinics throughout Northern California and beyond.

International SOS

cb internationalsos.com

The International SOS Group of Companies has been in the business of saving lives for over 40 years. Protecting global workforces from health and security threats, we deliver customised health, security risk management and wellbeing solutions to fuel our clients’ growth and productivity. In the event of extreme weather, an epidemic or a security incident, we provide an immediate response providing peace of mind. Our innovative technology and medical expertise with a focus on prevention, offers real-time, actionable insights and unparalleled on-the-ground delivery. We help clients meet compliance reporting needs for good governance. By partnering with us organisations can fulfil their Duty of Care responsibilities, while empowering business resilience, continuity and sustainability. Founded in 1985, the International SOS Group, headquartered in London & Singapore, is trusted by 9,000 organisations, including the majority of the Fortune Global 500 as well as mid-size enterprises, governments, educational institutions, and NGOs. 12,000 multi-cultural medical, security and logistics experts stand with you to provide support & assistance from over 1,200 locations in 90 countries, 24/7, 365 days. To protect your workforce, we are at your fingertips: www.internationalsos.com For news and events updates follow us on Twitter - https://twitter.com/IntlSOS

MultiCare Health System

multicare.org

MultiCare’s roots in the Pacific Northwest go back to 1882, with the founding of Tacoma’s first hospital. Over the years, we’ve grown from a Tacoma-centric, hospital-based organization into the largest, community-based, locally governed health system in the state of Washington. Today, our comprehensive system of health includes more than 300 primary, urgent, pediatric and specialty care locations across Washington, Idaho and Oregon, as well as 13 hospitals. We welcome patients from the entire Pacific Northwest region and our 20,000-plus team members — including employees, providers and volunteers — proudly care for the communities we serve. Without a doubt, our organization has changed over the years. But what has never changed, throughout our long history, has been our dedication to health and wellness of the people of the Pacific Northwest. Guided by our mission, vision and values, we are on continuous journey to deliver the services that our communities need, and to ensure access to those services, now and in the future.

UCLA Health

cb uclahealth.org

For more than half a century, UCLA Health has provided the best in healthcare and the latest in medical technology to the people of Los Angeles and throughout the world. Comprised of Ronald Reagan UCLA Medical Center, UCLA Medical Center Santa Monica, Resnick Neuropsychiatric Hospital at UCLA, UCLA Mattel Children's Hospital, UCLA West Valley Medical Center and the UCLA Medical Group with its wide-reaching system of primary-care and specialty-care offices throughout the region, UCLA Health is among the most comprehensive and advanced healthcare systems in the world. Our physicians are world leaders in the diagnosis and treatment of complex illnesses, and our hospitals are among the best in the country. Consistently ranked one of the top ten hospitals in the nation and the best medical center in the western United States by U.S. News & World Report, Ronald Reagan UCLA Medical Center is at the cutting edge of biomedical research, and our doctors and scientists are leaders in performing pioneering work across an astounding range of disciplines, from organ transplantation and cardiac surgery to neurosurgery and cancer treatment, and bringing the latest discoveries to virtually every field of medicine.

Bon Secours Mercy Health

bsmhealth.org

On September 1, 2018 Bon Secours Health System and Mercy Health combined to become the United States’ fifth largest Catholic health care ministry and one of the nation’s 20 largest health care systems. With 48 hospitals, thousands of providers, over 1,000 points of care and over 60,000 employees Bon Secours Mercy Health serves communities across seven states and Ireland. We are dedicated to continually improving health care quality, safety and cost effectiveness. Our hospitals, care sites and clinicians are recognized for clinical and operational excellence. By utilizing robust measurement and reporting processes, we hold ourselves accountable for enhancing care and improving outcomes for our patients, residents and clients.

Michigan Medicine

michiganmedicine.org

Michigan Medicine, based in Ann Arbor, Michigan, is part of one of the world’s leading universities. Michigan Medicine is a premier, highly ranked academic medical center and award-winning health care system with state-of-the-art facilities. Our vision is to create the future of health care through scientific discovery, innovations in education, and the most effective and compassionate care. We want to be the leader in health care, health care reform, and biomedical innovation. Michigan Medicine includes the U-M Hospitals and Health Centers; the U-M Medical School and its Faculty Group Practice; one of the nation's largest biomedical research communities; and education programs that train thousands of future health professionals and scientists each year. We were formerly known as the University of Michigan Medical Center; today that term applies generally to the collection of buildings on our main medical campus in Ann Arbor. We have a close partnership with the U-M School of Nursing and other health sciences schools at U-M. Through the Michigan Health Corporation, we are able to form partnerships outside of our University.

Trinity Health

trinity-health.org

Trinity Health is one of the largest not-for-profit, Catholic health care systems in the nation. It is a family of 123,000 colleagues and nearly 27,000 physicians and clinicians caring for diverse communities across 26 states. Nationally recognized for care and experience, the Trinity Health system includes 88 hospitals, 135 continuing care locations, the second largest PACE program in the country, 136 urgent care locations and many other health and well-being services. Based in Livonia, Michigan, its annual operating revenue is $21.5 billion with $1.4 billion returned to its communities in the form of charity care and other community benefit programs.

Duke University Health System

cb dukehealth.org

As a world-class academic and health care system, Duke Health strives to transform medicine and health locally and globally through innovative scientific research, rapid translation of breakthrough discoveries, educating future clinical and scientific leaders, advocating and practicing evidence-based medicine to improve community health, and leading efforts to eliminate health inequalities.

Loading…

NEWS

Hillcrest HealthCare System CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 28, 2026 08:00 AM

HIPAA Violation Cases - Updated 2026

Detailed below is a summary of all HIPAA violation cases that have resulted in civil monetary penalties or settlements with OCR.

Read Article

March 25, 2025 07:00 AM

Cyber thieves target nursing homes in rash of recent hacks

SNFs and other places caring for seniors and individuals with disabilities have been the recent target of a string of cyber attacks.

Read Article

March 11, 2025 07:00 AM

Hillcrest Convalescent Center Announces 106K-Record Data Breach

Cyberattacks and data breaches have been announced by Hillcrest Convalescent Center in North Carolina, Bay Cove Human Services in...

Read Article

March 02, 2025 08:00 AM

Hillcrest Convalescent Center Data Breach Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Hillcrest Convalescent Center data breach.

Read Article

January 04, 2025 08:00 AM

Ardent Health continues acquisition of urgent care clinics

The Tennessee-based health system has picked up 18 clinics in Oklahoma and New Mexico, following the purchase of other clinics recently.

Read Article

January 03, 2025 08:00 AM

Ardent Health continues expansion of urgent care clinics

For profit Ardent Health has acquired 18 urgent care clinics across New Mexico and Oklahoma from NextCare Urgent Care.

Read Article

January 03, 2025 08:00 AM

Ardent Health kicks off 2025 with major expansion of urgent care clinic footprint

The for-profit system kicked off 2025 by buying 18 urgent care clinics across New Mexico and Oklahoma from NextCare Urgent Care.

Read Article

May 08, 2024 08:56 PM

RESTORED: Ascension records accessible again after ransomware attack

TULSA, Okla. — Ascension, the company that owns Ascension St. John in Tulsa, said records are restored after a ransomware attack.

Read Article

February 14, 2024 08:00 AM

‘Corporate amnesia’: Class-action lawsuit criticizes INTEGRIS Health cyberattack response

The hospital system changed digital security providers last fall, but officials have declined to say if the hack was related.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…