Company Details
horizon-health-services-inc
6
52
92312
hhsinc.net
0
HOR_2980842
In-progress

Horizon Health Services, Inc. Company CyberSecurity Posture
hhsinc.netHorizon Health Services, Inc. (HHS) is a 501(c)(3) non-profit Federally Qualified Health Center (FQHC) that has been successfully providing essential healthcare safety net services in a rural setting for the past 43 years, in compliance with Section 330 of the Public Health Service Act. HHS provides primary medical, dental, behavioral health, and pharmacy services to uninsured, underinsured, and other vulnerable patients. The current service area is defined predominately as Isle of Wight, Southampton, Sussex, and Surry counties. As a FQHC, Horizon Health Services receives federal funding annually to support health center operations to improve the health of these underserved and vulnerable populations. HHS’ stated mission is to “Provide quality, comprehensive, and affordable primary health care on a continuous basis to all individuals.” Its vision is to be the area’s source for affordable medical care, be recognized as a leader in the delivery of community health services, provide individuals and families with the education and support to achieve healthy living, and be the provider of choice for health care in the service area and nearby communities.
Company Details
horizon-health-services-inc
6
52
92312
hhsinc.net
0
HOR_2980842
In-progress
Between 750 and 799

HHSI Global Score (TPRM)XXXX



No incidents recorded for Horizon Health Services, Inc. in 2025.
No incidents recorded for Horizon Health Services, Inc. in 2025.
No incidents recorded for Horizon Health Services, Inc. in 2025.
HHSI cyber incidents detection timeline including parent company and subsidiaries

Horizon Health Services, Inc. (HHS) is a 501(c)(3) non-profit Federally Qualified Health Center (FQHC) that has been successfully providing essential healthcare safety net services in a rural setting for the past 43 years, in compliance with Section 330 of the Public Health Service Act. HHS provides primary medical, dental, behavioral health, and pharmacy services to uninsured, underinsured, and other vulnerable patients. The current service area is defined predominately as Isle of Wight, Southampton, Sussex, and Surry counties. As a FQHC, Horizon Health Services receives federal funding annually to support health center operations to improve the health of these underserved and vulnerable populations. HHS’ stated mission is to “Provide quality, comprehensive, and affordable primary health care on a continuous basis to all individuals.” Its vision is to be the area’s source for affordable medical care, be recognized as a leader in the delivery of community health services, provide individuals and families with the education and support to achieve healthy living, and be the provider of choice for health care in the service area and nearby communities.


For over 30 years, we’ve worked around the world to share our healing model with communities and institutions facing many kinds of challenges. We collaborate with community leaders to co-create trauma relief and resilience-building programs that are responsive to the community’s unique experiences

World Cerebral Palsy Day is a global movement bringing together people living with cerebral palsy, their families, supporters, allies and organisations. Every year, October 6 is a day of celebration and awareness for the 50 million people who live with CP globally. With 133 partner organisations a
Giddy is a sexual health company dedicated to helping individuals and their partners live more fulfilling lives through thought-leading educational content. Giddy uses insights learned from its dialogue with users to develop innovative medical devices. Giddy's flagship product is called “Eddie by Gi
GirlTREK, the largest public health nonprofit for Black women and girls in the United States. With over 1M women in the movement, GirlTrek encourages women to use walking as a practical first step to inspire healthy living, families, and communities. As women organize walking teams, they mobilize

Born in Bradford is an internationally-recognised research programme which aims to find out what keeps families healthy and happy by tracking the lives of over 40,000 Bradfordians. We use our findings to develop new and practical ways to work with families and health professionals to improve the hea

The City of Nashua Division of Public Health and Community Services (DPHCS) is the Chief Public Health Strategist for the Greater Nashua Public Health Region (GNPHR), and the first accredited health department in New Hampshire (NH). We provide a range of direct services and engage a variety of partn
.png)
Horizon Blue Cross Blue Shield of New Jersey has agreed to pay the state $100 million to resolve allegations that it fraudulently secured a...
The state alleged the insurer was charging the state more than what health care providers billed for services. Horizon said the facts were...
Eight University of Memphis students have earned $200000 working with First Horizon Bank's cybersecurity team through UMRF Ventures Inc.
The global cybersecurity market size is projected to grow from $218.98 billion in 2025 to $562.77 billion by 2032, at a CAGR of 14.4% during...
Baltimore, MD November 04, 2025 –(PR.com)– Gallion Health, a leading provider of digital bill-only implant management and analytics, today announced its...
Venture funding continues to pour into transformative technologies as three standout startups secure nearly $80 million combined.
The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS)...
As quantum computers advance, today's cryptographic standards may become vulnerable. Companies should begin transitioning to post-quantum...
New Horizon Medical Solutions unveils Xceed™ TL Matrix: A game-changing innovation in wound care. LAS VEGAS, NV / ACCESS Newswire / October...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Horizon Health Services, Inc. is https://www.hhsinc.net/.
According to Rankiteo, Horizon Health Services, Inc.’s AI-generated cybersecurity score is 763, reflecting their Fair security posture.
According to Rankiteo, Horizon Health Services, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Horizon Health Services, Inc. is not certified under SOC 2 Type 1.
According to Rankiteo, Horizon Health Services, Inc. does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Horizon Health Services, Inc. is not listed as GDPR compliant.
According to Rankiteo, Horizon Health Services, Inc. does not currently maintain PCI DSS compliance.
According to Rankiteo, Horizon Health Services, Inc. is not compliant with HIPAA regulations.
According to Rankiteo,Horizon Health Services, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Horizon Health Services, Inc. operates primarily in the Public Health industry.
Horizon Health Services, Inc. employs approximately 6 people worldwide.
Horizon Health Services, Inc. presently has no subsidiaries across any sectors.
Horizon Health Services, Inc.’s official LinkedIn profile has approximately 52 followers.
Horizon Health Services, Inc. is classified under the NAICS code 92312, which corresponds to Administration of Public Health Programs.
No, Horizon Health Services, Inc. does not have a profile on Crunchbase.
Yes, Horizon Health Services, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/horizon-health-services-inc.
As of November 28, 2025, Rankiteo reports that Horizon Health Services, Inc. has not experienced any cybersecurity incidents.
Horizon Health Services, Inc. has an estimated 280 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Horizon Health Services, Inc. has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.