What is the official website of HMSA ?

The official website of HMSA is http://www.hmsa.com.

What is HMSA's cybersecurity risk score?

HMSA has an AI-generated cybersecurity risk score of 703 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has HMSA experienced?

According to Rankiteo, HMSA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HMSA been affected by any supply chain cyber incidents ?

According to Rankiteo, HMSA has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HMSA have SOC 2 Type 1 certification ?

According to Rankiteo, HMSA is not certified under SOC 2 Type 1.

Does HMSA have SOC 2 Type 2 certification ?

According to Rankiteo, HMSA does not hold a SOC 2 Type 2 certification.

Does HMSA comply with GDPR ?

According to Rankiteo, HMSA is not listed as GDPR compliant.

Does HMSA have PCI DSS certification ?

According to Rankiteo, HMSA does not currently maintain PCI DSS compliance.

Does HMSA comply with HIPAA ?

According to Rankiteo, HMSA is not compliant with HIPAA regulations.

Does HMSA have ISO 27001 certification ?

According to Rankiteo,HMSA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HMSA operate in ?

HMSA operates primarily in the Insurance industry.

How many employees does HMSA have ?

HMSA employs approximately 1,474 people worldwide.

Does HMSA own any subsidiaries ?

HMSA presently has no subsidiaries across any sectors.

How many LinkedIn followers does HMSA have ?

HMSA's official LinkedIn profile has approximately 10,423 followers.

What is the NAICS classification code for HMSA ?

HMSA is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does HMSA have a Crunchbase profile ?

No, HMSA does not have a profile on Crunchbase.

Does HMSA have a LinkedIn profile ?

Yes, HMSA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hmsahawaii.

How many cybersecurity incidents has HMSA experienced ?

As of August 15, 2026, Rankiteo reports that HMSA has experienced 2 cybersecurity incidents.

How many peer or competitor companies does HMSA have ?

HMSA has an estimated 15,670 peer or competitor companies worldwide.

What types of cybersecurity incidents has HMSA faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HMSA

Boost Score +25 with badge (5 left)

703

/1000

Moderate

728

/1000

Moderate

HMSA Vendor Cyber Rating & Cyber Score

hmsa.com

Add Your Compliance Badge

The Hawaii Medical Service Association (HMSA), an independent licensee of the Blue Cross and Blue Shield Association, is a reliable name in Hawaii health care. Established in 1938, we are the largest and most experienced provider of health care coverage in the state. Over half of Hawaii’s population have chosen HMSA for their health care coverage. We are dedicated to providing quality, affordable health plans; employee benefit services; and worksite wellness programs. HMSA also offers a variety of programs, services and support to help improve the health and well-being of our members and community.

HMSA A.I CyberSecurity Scoring

Scoring History

HMSA

HMSA CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

HMSA

Breach

12/2024

HMS1765907786

HMSA

Breach

100

6/2016

HMS11617522

Loading…

A.I.

HMSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HMSA

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for HMSA in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HMSA in 2026.

Incident Types HMSA vs Insurance Industry Avg (This Year)

No incidents recorded for HMSA in 2026.

Incident History - HMSA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HMSA Subsidiaries

Parent Company

HMSA

Insurance

Website: http://www.hmsa.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

HMSA Similar Companies

AIG

aig.com

American International Group, Inc. (NYSE: AIG) is a leading global insurance organization. AIG provides insurance solutions that help businesses and individuals in approximately 190 countries and jurisdictions protect their assets and manage risks through AIG operations and network partners. Additional information about AIG can be found at www.aig.com | https://www.youtube.com/aig | https://twitter.com/aiginsurance | https://www.linkedin.com/company/aig/ | https://www.facebook.com/AIGInsurance | http://www.instagram.com/aiginsurance/ AIG is the marketing name for the worldwide property-casualty and general insurance operations of American International Group, Inc. All products and services are written or provided by subsidiaries or affiliates of American International Group, Inc. Products or services may not be available in all countries and jurisdictions, and coverage is subject to underwriting requirements and actual policy language. Non-insurance products and services may be provided by independent third parties. Certain property-casualty coverages may be provided by a surplus lines insurer. Surplus lines insurers do not generally participate in state guaranty funds, and insureds are therefore not protected by such funds. AIG Social Media Community Guidelines: https://www.aig.com/home/about/social-media-guidelines

Anthem Blue Cross and Blue Shield

anthem.com

At Anthem Blue Cross and Blue Shield we understand our health connects us to each other. What we all do impacts those around us. So Anthem is dedicated to delivering better care to our members, providing greater value to our customers and helping improve the health of our communities. Independent licensees of the Blue Cross and Blue Shield Association. ANTHEM is a registered trademark of Anthem Insurance Companies, Inc. Products vary by state. Learn more about our plans and legal information at www.anthem.com

Sedgwick

cb sedgwick.com

Sedgwick is the world’s leading risk and claims administration partner, helping clients thrive by navigating the unexpected. The company’s expertise, combined with the most advanced AI-enabled technology available, sets the standard for solutions in claims administration, loss adjusting, benefits administration and product recall. With over 33,000 colleagues and 10,000 clients across 80 countries, Sedgwick provides unmatched perspective, caring that counts, and solutions for the rapidly changing and complex risk landscape.

Prudential Indonesia (PT Prudential Life Assurance)

prudential.co.id

Listening. Understanding. Delivering. At Prudential Indonesia we deliver excellence by consistently innovating, creating new opportunities and growing our business to cater all of our customers' needs. With a vision of becoming truly world class, Prudential Indonesia provides quality services and proven track record of market leadership in the country. Working at Prudential Indonesia gives you many opportunities to develop yourself and explore what you’re really capable of, as well as the perfect environment to collaborate, listen and care for others. Ask around. The more you find out about us, the more you’ll learn that we’re an insurance company that understands you. We are here to listen.

Suncorp Group

suncorpgroup.com.au

Suncorp offers insurance products and services through some of Australia and New Zealand’s most recognised brands. Our purpose is to build futures and protect what matters – the focus of our company for more than 100 years. With the passion of our people, and our portfolio of brands including AAMI, GIO, Vero, Bingle, Apia and more, our ambition is to be the leading Trans-Tasman insurer. We put our customers at the heart of every decision, and we genuinely care about our customers and the communities in which they live. At Suncorp, we are big on culture, which is why ours is built on trust, empowerment, and flexibility, to help our people unlock their full potential and unleash their best and brightest selves. A career with us is more than just a job, it is an opportunity to positively impact the lives of thousands of people through the work you do each day.

Generali Italia

generali.it

Generali Italia è la grande realtà assicurativa nata dalla fusione di Generali, Ina Assitalia, Toro, Lloyd Italico e Augusta. Dall’unione di persone e competenze che hanno fatto la storia dell’assicurazione in Italia, è nata una Compagnia con radici solide che guarda al futuro, in grado di offrire soluzioni sempre più innovative ed efficaci. Coniughiamo l’attenzione alle esigenze degli assicurati, alla solidità patrimoniale, all’esperienza e all’eccellenza tecnica del Gruppo Generali per accompagnare e proteggere i tuoi progetti di vita. Essere più grandi vuol dire anche diventare più forti: con l’esperienza di oltre 40 mila Agenti presenti capillarmente su tutto il territorio italiano oggi proteggiamo oltre 10 milioni di clienti. La sede principale di Generali Italia S.p.A. è in Via Marocchesa 14, 31021 Mogliano, Veneto, Italia

ICICI Lombard

cb icicilombard.com

ICICI Lombard is one of the leading private general insurance company in the country. The Company offers a well-diversified range of products through multiple distribution channels, including motor, health, crop, fire, personal accident, marine, engineering, and liability insurance. With a legacy of over 2 decades, ICICI Lombard is committed to customer centricity with its brand philosophy of ‘Nibhaye Vaade’. The company has issued over 37.6 million policies, over 3.2 million claims processed and has a Gross Written Premium (GWP) of ₹282.58 billion for the year ended March 31, 2025. ICICI Lombard has 328 branches and 15,123 employees, as on March 31, 2025. ICICI Lombard has been a pioneer in the industry and is one of the first large-scale insurance company in India to migrate its entire core systems to the cloud. With a strong focus on being digital-led and agile, it has launched several tech-driven innovations — including one of the industry-first Face Scan feature on its signature insurance and wellness app, IL TakeCare, which has received over 16.6 million downloads, as on June 30, 2025. * The company has won several prestigious awards- including the Insurance Asia, ICC Emerging Asia Insurance, ET BFSI Exceller, ET CIO, ICAI, FICCI Insurance, Contact Center World Global, and CSR Times in recognition of its various initiatives. For more details log on to https://www.icicilombard.com/. You can also connect with us via IL TakeCare App | RIA WhatsApp: 7738282666 *As per public disclosure.

Humana

cb humana.com

Humana will never ask, nor require a candidate to provide money for work equipment and network access during the application process. If you become aware of any instances where you as a candidate are asked to provide information and do not believe it is a legitimate request from Humana or affiliate, please contact [email protected] to validate the request At Humana, our cultural foundation is aligned to helping members achieve their best health by delivering personalized, simplified, whole-person healthcare experiences. Recognizing healthcare needs continue to evolve for each person, for each family and for each community, Humana continuously creates innovative solutions and resources that help people live their healthiest lives on their terms –when and where they need it. Our employees are at the heart of making this happen and that’s why we are dedicated to building an organization of dynamic talent whose experience and passion center on putting the customer first.

China Pacific Insurance Company

cb cpic.com.cn

China Pacific Life Insurance Co., Ltd (CPIC Life in short) was formed on the basis of life insurance business of China Pacific Insurance Co., Ltd., which was founded on May 13th 1991, and is held by CPIC Group. The company was incorporated in November 11, 2001, headquartered in Shanghai and registered capital totaling RMB 5.1 billion. In 2008, the premium income of the company reached RMB 66.092 billion, ranking 3rd in China life insurance market with a share of 9.0%, according to data published by CIRC. The company achieved a profit of RMB 2.104 billion this year with net profit of RMB 2.904 million.

Loading…

NEWS

HMSA CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 10, 2025 08:00 AM

HMSA Data Breach Lawsuit Investigation

If you were affected by the Health Management Systems of America data breach, you may be entitled to compensation.

Read Article

October 23, 2024 07:00 AM

Merger of two local credit unions will expand member benefits

HMSA Employees' Federal Credit Union has merged with Hawaii State Federal Credit Union after a final vote was completed by HMSA EFCU members...

Read Article

May 16, 2024 07:00 AM

Healthcare Champions 2024

The Queen's Health System | HMSA. The Queen's Health System. Photo Pookela Of The Year Award Qmcwo Ed 6962 2.

Read Article

March 12, 2024 07:00 AM

HMSA says recent cyberattack is affecting health care services locally, nationally

Two of Hawaii's health care coverage providers – Hawaii Medical Service Association and AlohaCare – shared more about their experience since...

Read Article

February 03, 2016 08:00 AM

Hawai‘i Medical Service Association Privacy Breach Affects 10,800

Independent Blue Cross Blue Shield licensee Hawai'i Medical Service Association (HMSA) has started sending breach notification letters to...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-74250

SUMMARY

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

https://bugs.launchpad.net/ossa/+bug/2163017

CVE-2026-74247

SUMMARY

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-74245

SUMMARY

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74244

SUMMARY

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the `/webhooks/stripe` endpoint without validating the Stripe-Signature header. Successful exploitation can lead to the unauthorized resetting of a namespace's build quota to its maximum and trigger unsolicited billing emails to namespace administrators.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74243

SUMMARY

A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impact Score

2.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…