Comparison Overview

Intermountain Health

VS

Health Service Executive

Intermountain Health

5245 South College Drive, None, Murray , UT, US, 84123
Last Update: 2025-12-09

Headquartered in Utah with locations in six primary states and additional operations across the western U.S., Intermountain Health is a nonprofit system of 33 hospitals, 400+ clinics, a medical group of more than 4,800 employed physicians and advanced care providers, a health plan division called Select Health with more than one million members, and other health services.  With more than 68,000 caregivers on a mission to help people live the healthiest lives possible, Intermountain is committed to improving community health, and is widely recognized as a leader in transforming healthcare. We strive to be a model health system by taking full clinical and financial accountability for the health of more people, partnering to proactively keep people well, and coordinating and providing the best possible care. At Intermountain, every caregiver helps us fulfill our mission of helping people live the healthiest lives possible. Interested in joining our team? Check out our career website and apply today at https://intermountainhealthcare.org/careers/.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 33,999
Subsidiaries: 2
12-month incidents
0
Known data breaches
1
Attack type number
1

Health Service Executive

Dr. Steevens Hospital, Dublin, Dublin 8, IE, D08 W2A8
Last Update: 2025-12-09
Between 700 and 749

Our purpose is to provide safe, high quality health and personal social services to the population of Ireland. Our vision is a healthier Ireland with a high quality health service valued by all. Our Workforce The health service is the largest employer in the state with over 110,000 whole time equivalents (WTEs) (not including home helps) employed. Over 70,000 are employed directly by the HSE with the remaining 40,000 employed by voluntary hospitals and agencies. Our vision for healthcare is to put people at the heart of everything we do – we are committed to delivering high quality safe healthcare to our service users, communities and the wider population. Our staff are at the core of the delivery of healthcare services, working within and across all care settings in communities, hospitals and healthcare offices.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 17,096
Subsidiaries: 1
12-month incidents
1
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/intermountain-health.jpeg
Intermountain Health
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/health-service-executive.jpeg
Health Service Executive
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Intermountain Health
100%
Compliance Rate
0/4 Standards Verified
Health Service Executive
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Intermountain Health in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

Health Service Executive has 20.48% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Intermountain Health (X = Date, Y = Severity)

Intermountain Health cyber incidents detection timeline including parent company and subsidiaries

Incident History — Health Service Executive (X = Date, Y = Severity)

Health Service Executive cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/intermountain-health.jpeg
Intermountain Health
Incidents

Date Detected: 4/2021
Type:Breach
Attack Vector: Hacking
Blog: Blog
https://images.rankiteo.com/companyimages/health-service-executive.jpeg
Health Service Executive
Incidents

Date Detected: 5/2025
Type:Ransomware
Attack Vector: Phishing (AI-enhanced), Credential stuffing (97% of identity attacks), Infostealer malware (e.g., Lumma Stealer), Exploitation of unpatched vulnerabilities, Social engineering (synthetic media), Supply chain attacks (via SMEs), Dark web data monetization
Motivation: Financial gain (52% of attacks), Espionage (4% of attacks), Geopolitical objectives (nation-states), Disruption of critical services (hospitals, governments), Data theft for dark web monetization
Blog: Blog

FAQ

Intermountain Health company demonstrates a stronger AI Cybersecurity Score compared to Health Service Executive company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Intermountain Health and Health Service Executive have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Health Service Executive company has reported more cyber incidents than Intermountain Health company.

Health Service Executive company has confirmed experiencing a ransomware attack, while Intermountain Health company has not reported such incidents publicly.

Intermountain Health company has disclosed at least one data breach, while the other Health Service Executive company has not reported such incidents publicly.

Neither Health Service Executive company nor Intermountain Health company has reported experiencing targeted cyberattacks publicly.

Neither Intermountain Health company nor Health Service Executive company has reported experiencing or disclosing vulnerabilities publicly.

Neither Intermountain Health nor Health Service Executive holds any compliance certifications.

Neither company holds any compliance certifications.

Intermountain Health company has more subsidiaries worldwide compared to Health Service Executive company.

Intermountain Health company employs more people globally than Health Service Executive company, reflecting its scale as a Hospitals and Health Care.

Neither Intermountain Health nor Health Service Executive holds SOC 2 Type 1 certification.

Neither Intermountain Health nor Health Service Executive holds SOC 2 Type 2 certification.

Neither Intermountain Health nor Health Service Executive holds ISO 27001 certification.

Neither Intermountain Health nor Health Service Executive holds PCI DSS certification.

Neither Intermountain Health nor Health Service Executive holds HIPAA certification.

Neither Intermountain Health nor Health Service Executive holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X