Comparison Overview

Intermountain Health

VS

VCU Health

Intermountain Health

5245 South College Drive, Murray , UT, 84123, US
Last Update: 2025-12-13
View Profile
Between 750 and 799
http://intermountainhealthcare.org/

As the largest nonprofit health system in the Mountain West, Intermountain Health is dedicated to creating healthier communities and helping our patients and caregivers thrive. It’s time to think of health in a whole new way, and by partnering with our patients and communities, providing expert care closer to home, and making great health more affordable, we can help more people get and stay well. We proudly invest back into improving the care we deliver, and our pioneering research is making healthcare more personalized, effective, and affordable. Serving patients and communities throughout the Mountain West, primarily in Colorado, Utah, Montana, Nevada, Idaho, and Wyoming, Intermountain includes 34 hospitals, 400+ clinics, a medical group, affiliate networks, homecare, telehealth, health insurance plans, and other services - along with wholly owned subsidiaries including Select Health, Castell, Tellica Imaging, and Classic Air Medical.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 32,995
Subsidiaries: 3
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

VCU Health

1250 E. Marshall Street, None, Richmond, Virginia, US, 23219
Last Update: 2025-12-09
Between 700 and 749
careers.vcuhealth.org

We are a strong, passionate team of more than 12,500 who take pride in caring for every person who comes through our doors. We lift each other up so we can provide the very best and safest care to those who need us most. Together. Every day. With the support of our university, we make up an academic medical center committed to excellence in patient care, innovation and training tomorrow’s health care workforce. We continue to educate, research and evolve – staying on the cutting edge of care. As a community of innovators, every team member can contribute a spark of ingenuity igniting a force to discover the next cure, hold the next hand, solve the greatest challenges and create the health care of tomorrow. We foster an atmosphere of respect and welcoming for all communities. We infuse our teams with diverse talent that inspires everyone to contribute openly and freely, maximizing their impact and creating meaningful change for our patients and community. Join our team and help us create a new kind of patient experience. Join VCU Health. EEO Statement: VCU Health System strictly prohibits and does not tolerate discrimination against, or harassment of, team members, applicants, or any other covered persons because of age, race, ethnicity, religion, culture, language, physical or mental disability, socioeconomic status, sex (sexual orientation, gender identity or expression and pregnancy), protected veteran status, marital status, genetic information, or any other protected characteristics under applicable federal, state, or local law. Pay Transparency Provisions: VCU Health System complies with the Pay Transparency Provisions.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 11,234
Subsidiaries: 3
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/intermountain-healthcare.jpeg
Intermountain Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/vcu-health-system.jpeg
VCU Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Intermountain Health
100%
Compliance Rate
0/4 Standards Verified
VCU Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Intermountain Health in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for VCU Health in 2025.

Incident History — Intermountain Health (X = Date, Y = Severity)

Intermountain Health cyber incidents detection timeline including parent company and subsidiaries

Incident History — VCU Health (X = Date, Y = Severity)

VCU Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/intermountain-healthcare.jpeg
Intermountain Health
Incidents

Date Detected: 4/2021
Type:Breach
Attack Vector: Hacking
Blog: Blog
https://images.rankiteo.com/companyimages/vcu-health-system.jpeg
VCU Health
Incidents

Date Detected: 05/2019
Type:Data Leak
Attack Vector: Insider Threat
Blog: Blog

Date Detected: 07/2018
Type:Data Leak
Attack Vector: Unauthorized Access
Blog: Blog

Date Detected: 01/2017
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

Intermountain Health company demonstrates a stronger AI Cybersecurity Score compared to VCU Health company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

VCU Health company has faced a higher number of disclosed cyber incidents historically compared to Intermountain Health company.

In the current year, VCU Health company and Intermountain Health company have not reported any cyber incidents.

Neither VCU Health company nor Intermountain Health company has reported experiencing a ransomware attack publicly.

Both VCU Health company and Intermountain Health company have disclosed experiencing at least one data breach.

Neither VCU Health company nor Intermountain Health company has reported experiencing targeted cyberattacks publicly.

Neither Intermountain Health company nor VCU Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither Intermountain Health nor VCU Health holds any compliance certifications.

Neither company holds any compliance certifications.

Both VCU Health company and Intermountain Health company have a similar number of subsidiaries worldwide.

Intermountain Health company employs more people globally than VCU Health company, reflecting its scale as a Hospitals and Health Care.

Neither Intermountain Health nor VCU Health holds SOC 2 Type 1 certification.

Neither Intermountain Health nor VCU Health holds SOC 2 Type 2 certification.

Neither Intermountain Health nor VCU Health holds ISO 27001 certification.

Neither Intermountain Health nor VCU Health holds PCI DSS certification.

Neither Intermountain Health nor VCU Health holds HIPAA certification.

Neither Intermountain Health nor VCU Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References