Comparison Overview
Inova Health

Inova Health
3300 Gallows Road, Falls Church, Virginia, US, 22042
Last Update: 01/04/2026
We are Inova, Northern Virginia and the Washington, D.C. metropolitan area’s leading nonprofit healthcare provider. With expertise and compassion, we partner with our patients to help them stay healthy. We treat illness, heal injury and look at a patient’s whole health ...

UCHealth
12401 E. 17th Avenue, Aurora, 80045, US
Last Update: 01/04/2026
At UCHealth, we do things differently. We strive to promote individual and community health and leave no question unanswered along the way. We’re driven to improve and optimize health care. Our network of nationally-recognized hospitals, clinic locations and health car...
Compliance Ranges Comparison

Inova Health







UCHealth






Benchmark & Cyber Underwriting Signals
Incidents vs Hospitals and Health Care Industry Avg (This Year)
No incidents recorded for Inova Health in 2026.
Incidents vs Hospitals and Health Care Industry Avg (This Year)
No incidents recorded for UCHealth in 2026.
Incident History - Inova Health (X = Date, Y = Severity)
Inova Health cyber incidents detection timeline including parent company and subsidiaries.
Incident History - UCHealth (X = Date, Y = Severity)
UCHealth cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Inova Health

UCHealth
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.