What is the official website of Innovation Health ?

The official website of Innovation Health is http://www.innovationhealth.com.

What is Innovation Health's cybersecurity risk score?

Innovation Health has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Innovation Health experienced?

According to Rankiteo, Innovation Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Innovation Health been affected by any supply chain cyber incidents ?

According to Rankiteo, Innovation Health has been affected by a supply chain cyber incident involving Change Healthcare, with the incident ID CHA455090325.

Does Innovation Health have SOC 2 Type 1 certification ?

According to Rankiteo, Innovation Health is not certified under SOC 2 Type 1.

Does Innovation Health have SOC 2 Type 2 certification ?

According to Rankiteo, Innovation Health does not hold a SOC 2 Type 2 certification.

Does Innovation Health comply with GDPR ?

According to Rankiteo, Innovation Health is not listed as GDPR compliant.

Does Innovation Health have PCI DSS certification ?

According to Rankiteo, Innovation Health does not currently maintain PCI DSS compliance.

Does Innovation Health comply with HIPAA ?

According to Rankiteo, Innovation Health is not compliant with HIPAA regulations.

Does Innovation Health have ISO 27001 certification ?

According to Rankiteo,Innovation Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Innovation Health operate in ?

Innovation Health operates primarily in the Insurance industry.

How many employees does Innovation Health have ?

Innovation Health employs approximately 59 people worldwide.

Does Innovation Health own any subsidiaries ?

Innovation Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does Innovation Health have ?

Innovation Health's official LinkedIn profile has approximately 1,863 followers.

What is the NAICS classification code for Innovation Health ?

Innovation Health is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Innovation Health have a Crunchbase profile ?

No, Innovation Health does not have a profile on Crunchbase.

Does Innovation Health have a LinkedIn profile ?

Yes, Innovation Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/innovation-health.

How many cybersecurity incidents has Innovation Health experienced ?

As of June 30, 2026, Rankiteo reports that Innovation Health has experienced 6 cybersecurity incidents.

How many peer or competitor companies does Innovation Health have ?

Innovation Health has an estimated 15,579 peer or competitor companies worldwide.

What types of cybersecurity incidents has Innovation Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Innovation Health

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Innovation Health Vendor Cyber Rating & Cyber Score

innovationhealth.com

Add Your Compliance Badge

Innovation Health is transforming the health care journey. As part of the CVS Health® and Aetna® family of companies, our goal is to help our members achieve their best health. Through innovative programs, coordinated care and remarkable access, our health plans are personalized to fit our members’ needs. The Innovation Health network of doctors, specialists and hospitals includes convenient care from your neighborhood CVS Pharmacy® and MinuteClinic® - making access easy and affordable. We are committed to making health care better for businesses, individuals and families in Northern Virginia.

Innovation Health A.I CyberSecurity Scoring

Scoring History

Innovation Health

Innovation Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Aetna, a CVS Health...

Breach

12/2025

AET1766440692

CVS Health

Ransomware

100

2/2024

Change Healthca...

CHA455090325

Innovation Health

Breach

11/2023

CVS1026072725

Innovation Health

Breach

100

5/2023

AET411072725

Innovation Health

Breach

1/2023

CVS910072525

CVS Health

Breach

03/2021

CVS153930322

Loading…

A.I.

Innovation Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Innovation Health

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Innovation Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Innovation Health in 2026.

Incident Types Innovation Health vs Insurance Industry Avg (This Year)

No incidents recorded for Innovation Health in 2026.

Incident History - Innovation Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Innovation Health Subsidiaries

Innovation Health

Insurance

Website: http://www.innovationhealth.com

Company Size: 51-200 employees

Aetna, a CVS Health CompanyWellness and Fitness Services

ActiveHealthWellness and Fitness Services

Banner|AetnaInsurance

CVS HealthHospitals and Health Care

CVS Health VenturesVenture Capital and Private Equity Principals

CVS CaremarkHospitals and Health Care

Coram CVS/specialty infusion servicesHospitals and Health Care

CVS CaresideHospitals and Health Care

Signify Health Ireland, part of CVS HealthHospitals and Health Care

CVS Health CareersHospitals and Health Care

CVS HealthspireHospitals and Health Care

Loading…

Innovation Health Similar Companies

Life Insurance Corporation of India

licindia.in

The Life Insurance Corporation of India (LIC) is a state-owned Life Insurance Company of India. Founded in 1956, it operates as a Government-Owned Corporation, headquartered in Mumbai, Maharashtra, and is a key player in the life insurance sector in India. LIC offers a wide range of insurance products to cater to different needs of individuals, including Life Insurance, Health Insurance, Pension Plans, ULIPs, Group Schemes and Micro Insurance. We have a vast network of agents and branches across the country and overseas, making it accessible to a large section of the nation's residential and non residential population.

Lockton

lockton.com

What makes Lockton stand apart is also what makes us better: independence. Our private ownership empowers our 13,100+ Associates doing business in over 140+ countries to focus solely on clients' risk and insurance needs. With expertise that reaches around the globe, we deliver the deep understanding needed to accomplish remarkable results.

China Life Insurance Co.Ltd

chinalife.com.cn

China Life Insurance (Group) Company, headquartered in Beijing, is a large state-owned financial and insurance company. Its predecessor,PICC was founded in 1949 and the PICC (Life) Co.,Ltd was set up in 1996 after its separation from the former PICC. In 1999, it was renamed China Life Insurance Company. With the approval of the State Council and the China Insurance Regulatory Commission, the former China Life Insurance Company was restructured as China Life Insurance (Group) Company in 2003. It has China Life Insurance Company Limited, China Life Asset Management Company Limited, China Life Property & Casualty Insurance Company Limited, China Life Pension Company Limited, China Life Ecommerce Company Limited, China Life Insurance (Overseas) Company Limited, China Life Investment Holding Company Limited and Insurance Professional College as its subsidiaries. Its business covers life insurance, property & casualty insurance, pension plans (corporate annuity), asset management, alternative investment, overseas operations and e-commerce. Through capital-links, it has invested in several banks, security firms and other non-financial institutions.

Intact

cb intactfc.com

We created a purpose-driven company based on Values and a belief that insurance is about people, not things. This is the foundation on which we have built Intact and it lives every day through our purpose, Values, what we aim to achieve and how. ___ Nous sommes là pour aider les gens, les entreprises et la société à aller de l’avant dans les bons moments et à être résilients dans le moments difficiles. Notre entreprise est basée sur des valeurs et la conviction que l’assurance doit d’abord s’intéresser aux personnes, et non aux choses. C’est dans cette optique que nous avons bâti Intact et ça se reflète chaque jour dans notre raison d’être, nos valeurs, nos facteurs de succès en leadership, notre promesse aux employés, nos objectifs et notre stratégie.

Aviva

cb aviva.com

💛 We're a leading Insurance, Wealth & Retirement business. 📣 Follow for #LifeAtAviva. Aviva is nothing without our people. Living up to our purpose to be with you today for a better tomorrow applies to those we work with just as much as it does to our customers. We want Aviva to be a place where people can be themselves, and we want our workforce to reflect the customers and communities we serve. This means offering market-leading benefits and challenging ourselves to do more to build a workplace – and society – that works for all. It takes you. It takes Aviva.

MetLife

metlife.com

We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is committed to being that partner. That’s why we’re transforming our business: Delivering greater value for the people we serve by becoming a simpler, more focused, and future-facing company. We’ll be introducing new ways to meet our customers’ evolving needs, with flexible products; simpler, more intuitive experiences and a range of new services. MetLife. Navigating life together. For customer service: https://www.metlife.com/support-and-manage/contact-us/ For social media notices: https://www.metlife.com/about-us/terms-and-conditions/social-media/ MetLife, Inc. (NYSE: MET), through its subsidiaries and affiliates (“MetLife”), is one of the world’s leading financial services companies, providing insurance, annuities, employee benefits and asset management to help its individual and institutional customers navigate their changing world. Founded in 1868, MetLife has operations in more than 40 markets globally and holds leading positions in the United States, Japan, Latin America, Asia, Europe and the Middle East.

Chubb

cb chubb.com

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly and promptly. The company is also defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb maintains executive offices in Zurich, New York, London, Paris and other locations, and employs approximately 40,000 people worldwide. Read our Social Media Guidelines here: https://www.chubb.com/us-en/about-chubb/chubbs-social-media-guidelines.aspx Notre section « À propos » est également disponible en français, ici: https://www.chubb.com/ca-fr/about-chubb-in-canada/a-propos-de-chubb-au-canada.aspx

GEICO

gei.co

At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide. Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States.

Gallagher

cb linktr.ee

Gallagher, a global insurance brokerage, risk management, and consulting firm, serves communities around the globe, helping clients address risk, protecting assets, and recovering from losses. The products and services we provide keep businesses and institutions running, and enable individuals and families to face their future with confidence. Gallagher provides retail and wholesale property and casualty brokerage, alternative risk transfer services, employee benefit consulting, and actuarial services. Gallagher also offers claims and information management, risk control consulting and appraisal services, human resource consulting, and retirement services. Follow us on social: Instagram: http://instagram.com/gallagherglobal Facebook: http://www.facebook.com/GallagherGlobal Twitter: https://twitter.com/GallagherGlobal YouTube: https://www.youtube.com/GallagherGlobal

Loading…

NEWS

Innovation Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 04, 2026 08:00 AM

Digital Health Center of Excellence

Our goal: Empower stakeholders to advance health care by fostering responsible and high-quality digital health innovation.

Read Article

February 04, 2026 08:00 AM

Article | Layoffs hit federal health innovation office

The Advanced Research Projects Agency for Health, the innovation arm of the National Institutes of Health, is laying off more of its...

Read Article

January 07, 2026 08:00 AM

AI adoption in healthcare will spark innovation and cyber risk in 2026

In 2026, AI will continue to drive innovation, highlighting cybersecurity, privacy and governance gaps in the process.

Read Article

December 22, 2025 08:00 AM

In 2025, healthcare innovation happened on all fronts

It was a busy year for digital health transformation: regulatory and reimbursement changes, cybersecurity challenges and, yes,...

Read Article

December 03, 2025 08:00 AM

Future-proofing healthcare cybersecurity: What every leader should know

Cybersecurity insights for healthcare leaders—build resilience, manage risks, and lead with confidence in a changing threat landscape.

Read Article

November 26, 2025 08:00 AM

New ARPA-H Director Outlines Cybersecurity, Innovation Agenda

Alicia Jackson prioritizes hospital cybersecurity and opens opportunities for innovators through new programs and funding events.

Read Article

November 01, 2025 07:00 AM

Censinet, AHA, and the Scottsdale Institute Launch the 2026 Healthcare Cybersecurity Benchmarking Study

“Health-ISAC is proud to co-sponsor the 2026 Healthcare Cybersecurity Benchmarking Study, which delivers unmatched visibility into the risks...

Read Article

November 01, 2025 07:00 AM

Censinet, AWS partner to improve healthcare risk management with AI-powered GRC, cybersecurity solutions

Censinet, provider of healthcare risk management solutions, announced a collaboration with Amazon Web Services (AWS) to launch a new suite...

Read Article

October 27, 2025 07:00 AM

Are hospitals and health systems really ready for AI?

Healthcare leaders are bullish about the benefits of artificial intelligence, a new report from Kyndryl shows, but many are still grappling...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8023

SUMMARY

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-url_buffer (assembled in on_url() for HTTP/1 and copied verbatim from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., "%s%s", static_fs_detail-fs_path, client-url_buffer) at http_server_http1.c:603 and http_server_http2.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached via wildcard/leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /<prefix/../../<file is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted volume (information disclosure). The HTTP server requires no TLS or authentication to reach this path. The fix adds http_server_remove_dot_segments(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the traversal. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-7656

SUMMARY

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator precedence: the form was '((length/hop/source/target checks) && (icmp_hdr-code != 0))'. Because every legitimate ND message carries ICMPv6 code 0, an attacker setting code == 0 (the normal value) caused the entire predicate to evaluate false, so the packet was never dropped and all of the other checks were silently skipped. The bypassed checks include the mandatory Hop Limit == 255 verification (which proves an ND packet originated on-link and was not forwarded) and, for Router Advertisements, the requirement that the source be a link-local address, as well as multicast-target sanity checks. As a result, an adjacent on-link attacker — and, because the Hop-Limit-255 guard is bypassed, potentially a remote/off-link attacker whose packets would otherwise be rejected — can have forged Router Advertisement, Neighbor Solicitation, and Neighbor Advertisement messages accepted. A forged RA lets the attacker reconfigure the victim's default router, on-link prefixes (SLAAC), MTU, reachable/retransmit timers, and (with CONFIG_NET_IPV6_RA_RDNSS) DNS servers, while forged NS/NA enable neighbor-cache poisoning, enabling man-in-the-middle, traffic redirection, and denial of service. The flaw is an input-validation/authentication weakness rather than a memory-safety issue: the underlying packet-parsing primitives (net_pkt_get_data, net_pkt_read, net_pkt_skip) are independently bounds-safe and the validated 'length' is the true buffer length, so skipping the length check causes no out-of-bounds access. The defect has existed since the logic was introduced in 2018 and shipped in all releases through v4.4.0; it is fixed by splitting the condition so any failing check drops the packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

CVE-2026-51219

SUMMARY

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-51218

SUMMARY

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-10648

SUMMARY

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_alloc() uses net_buf_alloc(K_NO_WAIT) against the shared MCUmgr packet pool (CONFIG_MCUMGR_TRANSPORT_NETBUF_COUNT, default 4), which returns NULL when the pool is exhausted. In default builds the __ASSERT_NO_MSG in net_buf_reset is a no-op, so net_buf_simple_reset writes through the NULL pointer (buf->len = 0; buf->data = buf->__buf), causing a fault/crash. The fragment data reaches this code from attacker-controlled bytes on the MCUmgr serial/UART/shell-console transports (smp_uart.c, smp_raw_uart.c, smp_shell.c), and a fresh buffer is allocated at the start of essentially every new packet. An attacker on the serial/console link can flood the transport to drive the 4-entry buffer pool to exhaustion and induce the NULL dereference, crashing the device (denial of service). The defect was introduced after the original MCUmgr rework and shipped in Zephyr v4.4.0. The fix moves the NULL check ahead of net_buf_reset.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 6.2)

cvss3

Base Score: 6.2

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.5

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…