Comparison Overview

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has the best AI Cybersecurity Score ?

Johnson & Johnson company demonstrates a stronger AI Cybersecurity Score compared to OSF HealthCare company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced more cyber incidents in the past ?

Johnson & Johnson company has faced a higher number of disclosed cyber incidents historically compared to OSF HealthCare company.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced more cyber incidents this year ?

In the current year, Johnson & Johnson company has reported more cyber incidents than OSF HealthCare company.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one ransomware attack ?

OSF HealthCare company has confirmed experiencing a ransomware attack, while Johnson & Johnson company has not reported such incidents publicly.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one data breach ?

Johnson & Johnson company has disclosed at least one data breach, while the other OSF HealthCare company has not reported such incidents publicly.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one targeted cyberattack ?

Neither OSF HealthCare company nor Johnson & Johnson company has reported experiencing targeted cyberattacks publicly.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one vulnerability ?

Neither Johnson & Johnson company nor OSF HealthCare company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one holds the most compliance certifications ?

Neither Johnson & Johnson nor OSF HealthCare holds any compliance certifications.

Q: Between Johnson & Johnson company and OSF HealthCare company, which one has the most subsidiaries ?

Johnson & Johnson company has more subsidiaries worldwide compared to OSF HealthCare company.

Johnson & Johnson

New Brunswick, NJ, US, 08903

Last Update: 2025-12-09

View Profile

Between 750 and 799

http://www.jnj.com

At Johnson & Johnson, we believe health is everything. As a focused healthcare company, with expertise in Innovative Medicine and MedTech, we’re empowered to tackle the world’s toughest health challenges, innovate through science and technology, and transform patient care. All of this is possible because of our people. We’re passionate innovators who put people first, and through our purpose-driven culture and talented workforce, we are stronger than ever. Learn more at https://www.jnj.com. Community Guidelines: http://www.jnj.com/social-media-community-guidelines

NAICS: 62

NAICS Definition: Health Care and Social Assistance

Employees: 108,305

Subsidiaries: 8

12-month incidents

1

Known data breaches

4

Attack type number

1

View Profile

OSF HealthCare

124 SW Adams St, Peoria, Illinois, US, 61602

Last Update: 2025-12-09

Between 700 and 749

http://www.osfhealthcare.org

OSF HealthCare is an integrated health system founded by The Sisters of the Third Order of St. Francis. Headquartered in Peoria, Illinois, OSF HealthCare has 17 hospitals – 11 acute care, five critical access and one continuing care – with 2,305 licensed beds throughout Illinois and Michigan. OSF employs more than 26,000 Mission Partners across 171 locations; has two colleges of nursing; operates OSF Home Care Services, an extensive network of home health and hospice services; owns Pointcore, Inc., comprised of health care-related businesses; OSF HealthCare Foundation, the philanthropic arm for the organization; and OSF Ventures, which provides investment capital for promising health care innovation startups. In 2020, OSF OnCall was established as a digital health operating unit and includes a hospital-at-home program. OSF OnCall delivers care and services when, where and how patients prefer to receive them. OSF HealthCare has been recognized by Fortune as one of the most innovative companies in the country. OSF consistently earns recognition for showing dedication to the well-being of its Mission Partners: •America’s Best-in-State Employers | Forbes Magazine | 2018-2025 •150 Top Places to Work in Healthcare | Becker’s Healthcare | 2019, 2022-2025 •Best Employers for Women | Forbes Magazine | 2020 OSF HealthCare is an Equal Opportunity Employer (EOE).

NAICS: 62

NAICS Definition: Health Care and Social Assistance

Employees: 11,973

Subsidiaries: 2

12-month incidents

0

Known data breaches

0

Attack type number

2

Johnson & Johnson

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

OSF HealthCare

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Hospitals and Health Care Industry Average (This Year)

Johnson & Johnson has 20.48% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for OSF HealthCare in 2025.

Incident History — Johnson & Johnson (X = Date, Y = Severity)

Johnson & Johnson cyber incidents detection timeline including parent company and subsidiaries

Incident History — OSF HealthCare (X = Date, Y = Severity)

OSF HealthCare cyber incidents detection timeline including parent company and subsidiaries

Johnson & Johnson

Incidents

Date Detected: 7/2025

Type:Breach

Motivation: Financial Gain

Blog: Blog

Date Detected: 8/2024

Type:Breach

Attack Vector: Hacking

Blog: Blog

Date Detected: 6/2023

Type:Breach

Motivation: Financial Gain (Plaintiffs), Corporate Accountability, Consumer Protection

Blog: Blog

OSF HealthCare

Incidents

Date Detected: 10/2021

Type:Ransomware

Blog: Blog

Date Detected: 05/2021

Type:Data Leak

Blog: Blog

Johnson & Johnson company demonstrates a stronger AI Cybersecurity Score compared to OSF HealthCare company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Johnson & Johnson company has faced a higher number of disclosed cyber incidents historically compared to OSF HealthCare company.

In the current year, Johnson & Johnson company has reported more cyber incidents than OSF HealthCare company.

OSF HealthCare company has confirmed experiencing a ransomware attack, while Johnson & Johnson company has not reported such incidents publicly.

Johnson & Johnson company has disclosed at least one data breach, while the other OSF HealthCare company has not reported such incidents publicly.

Neither OSF HealthCare company nor Johnson & Johnson company has reported experiencing targeted cyberattacks publicly.

Neither Johnson & Johnson company nor OSF HealthCare company has reported experiencing or disclosing vulnerabilities publicly.

Neither Johnson & Johnson nor OSF HealthCare holds any compliance certifications.

Neither company holds any compliance certifications.

Johnson & Johnson company has more subsidiaries worldwide compared to OSF HealthCare company.

Johnson & Johnson company employs more people globally than OSF HealthCare company, reflecting its scale as a Hospitals and Health Care.

Neither Johnson & Johnson nor OSF HealthCare holds SOC 2 Type 1 certification.

Neither Johnson & Johnson nor OSF HealthCare holds SOC 2 Type 2 certification.

Neither Johnson & Johnson nor OSF HealthCare holds ISO 27001 certification.

Neither Johnson & Johnson nor OSF HealthCare holds PCI DSS certification.

Neither Johnson & Johnson nor OSF HealthCare holds HIPAA certification.

Neither Johnson & Johnson nor OSF HealthCare holds GDPR certification.

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 2.6

Severity: HIGH

AV:N/AC:H/Au:N/C:N/I:P/A:N

cvss3

Base: 3.7

Severity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base: 6.3

Severity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Johnson & Johnson

VS

OSF HealthCare

Johnson & Johnson

OSF HealthCare

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

Incidents vs Hospitals and Health Care Industry Average (This Year)

Incident History — Johnson & Johnson (X = Date, Y = Severity)

Incident History — OSF HealthCare (X = Date, Y = Severity)

Notable Incidents

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Johnson & Johnson

VS

OSF HealthCare

Johnson & Johnson

OSF HealthCare

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

Incidents vs Hospitals and Health Care Industry Average (This Year)

Incident History — Johnson & Johnson (X = Date, Y = Severity)

Incident History — OSF HealthCare (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Breach JOH333071125

🔒 Incident : Breach JOH107072525

🔒 Incident : Breach JOH0362103102825

🔒 Incident : Ransomware OSF22412822

🔒 Incident : Data Leak OSF19491222

FAQ

Between Johnson & Johnson company and OSF HealthCare company, which one has the best AI Cybersecurity Score ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced more cyber incidents in the past ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced more cyber incidents this year ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one ransomware attack ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one data breach ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one targeted cyberattack ?

Between Johnson & Johnson company and OSF HealthCare company, which one has experienced at least one vulnerability ?

Between Johnson & Johnson company and OSF HealthCare company, which one holds the most compliance certifications ?

Between Johnson & Johnson company and OSF HealthCare company, which one holds the fewest compliance certifications ?

Between Johnson & Johnson company and OSF HealthCare company, which one has the most subsidiaries ?

Between Johnson & Johnson company and OSF HealthCare company, which one has the largest number of employees ?

Between Johnson & Johnson and OSF HealthCare, which company holds both SOC 2 Type 1 certifications ?

Between Johnson & Johnson and OSF HealthCare, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Johnson & Johnson or OSF HealthCare ?

Which company is PCI DSS compliant — Johnson & Johnson or OSF HealthCare ?

Between Johnson & Johnson and OSF HealthCare, which company complies with HIPAA regulations for healthcare data ?

Between Johnson & Johnson and OSF HealthCare, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information