Comparison Overview

International SOS

VS

Intermountain Health

International SOS

#17-00 Odeon Towers, Singapore, 188720, SG
Last Update: 2025-12-10
View Profile
Between 750 and 799
http://www.internationalsos.com

The International SOS Group of Companies has been in the business of saving lives for over 40 years. Protecting global workforces from health and security threats, we deliver customised health, security risk management and wellbeing solutions to fuel our clients’ growth and productivity. In the event of extreme weather, an epidemic or a security incident, we provide an immediate response providing peace of mind. Our innovative technology and medical expertise with a focus on prevention, offers real-time, actionable insights and unparalleled on-the-ground delivery. We help clients meet compliance reporting needs for good governance. By partnering with us organisations can fulfil their Duty of Care responsibilities, while empowering business resilience, continuity and sustainability. Founded in 1985, the International SOS Group, headquartered in London & Singapore, is trusted by 9,000 organisations, including the majority of the Fortune Global 500 as well as mid-size enterprises, governments, educational institutions, and NGOs. 12,000 multi-cultural medical, security and logistics experts stand with you to provide support & assistance from over 1,200 locations in 90 countries, 24/7, 365 days. To protect your workforce, we are at your fingertips: www.internationalsos.com For news and events updates follow us on Twitter - https://twitter.com/IntlSOS

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 12,309
Subsidiaries: 7
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

Intermountain Health

5245 South College Drive, Murray , UT, 84123, US
Last Update: 2025-12-05
Between 750 and 799
http://intermountainhealthcare.org/

As the largest nonprofit health system in the Mountain West, Intermountain Health is dedicated to creating healthier communities and helping our patients and caregivers thrive. It’s time to think of health in a whole new way, and by partnering with our patients and communities, providing expert care closer to home, and making great health more affordable, we can help more people get and stay well. We proudly invest back into improving the care we deliver, and our pioneering research is making healthcare more personalized, effective, and affordable. Serving patients and communities throughout the Mountain West, primarily in Colorado, Utah, Montana, Nevada, Idaho, and Wyoming, Intermountain includes 34 hospitals, 400+ clinics, a medical group, affiliate networks, homecare, telehealth, health insurance plans, and other services - along with wholly owned subsidiaries including Select Health, Castell, Tellica Imaging, and Classic Air Medical.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 32,995
Subsidiaries: 3
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/international-sos.jpeg
International SOS
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/intermountain-healthcare.jpeg
Intermountain Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
International SOS
100%
Compliance Rate
0/4 Standards Verified
Intermountain Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for International SOS in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Intermountain Health in 2025.

Incident History — International SOS (X = Date, Y = Severity)

International SOS cyber incidents detection timeline including parent company and subsidiaries

Incident History — Intermountain Health (X = Date, Y = Severity)

Intermountain Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/international-sos.jpeg
International SOS
Incidents

Date Detected: 8/2013
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/intermountain-healthcare.jpeg
Intermountain Health
Incidents

Date Detected: 4/2021
Type:Breach
Attack Vector: Hacking
Blog: Blog

FAQ

Both International SOS company and Intermountain Health company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

International SOS and Intermountain Health have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Intermountain Health company and International SOS company have not reported any cyber incidents.

Neither Intermountain Health company nor International SOS company has reported experiencing a ransomware attack publicly.

Both Intermountain Health company and International SOS company have disclosed experiencing at least one data breach.

Neither Intermountain Health company nor International SOS company has reported experiencing targeted cyberattacks publicly.

Neither International SOS company nor Intermountain Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither International SOS nor Intermountain Health holds any compliance certifications.

Neither company holds any compliance certifications.

International SOS company has more subsidiaries worldwide compared to Intermountain Health company.

Intermountain Health company employs more people globally than International SOS company, reflecting its scale as a Hospitals and Health Care.

Neither International SOS nor Intermountain Health holds SOC 2 Type 1 certification.

Neither International SOS nor Intermountain Health holds SOC 2 Type 2 certification.

Neither International SOS nor Intermountain Health holds ISO 27001 certification.

Neither International SOS nor Intermountain Health holds PCI DSS certification.

Neither International SOS nor Intermountain Health holds HIPAA certification.

Neither International SOS nor Intermountain Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (including HTML/JavaScript) can be exposed in error responses, creating an XSS risk if Content-Type isn't strictly enforced. This issue does not have a fix at the time of publication.

Published
Date
2025-12-11
Updated
Date
2025-12-11
Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.

Published
Date
2025-12-11
Updated
Date
2025-12-11
Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.

Published
Date
2025-12-11
Updated
Date
2025-12-11
Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.

Published
Date
2025-12-11
Updated
Date
2025-12-11
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.

Published
Date
2025-12-11
Updated
Date
2025-12-11
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References