What is the official website of KentuckyOne Health ?

The official website of KentuckyOne Health is http://www.kentuckyonehealth.org.

What is KentuckyOne Health's cybersecurity risk score?

KentuckyOne Health has an AI-generated cybersecurity risk score of 719 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has KentuckyOne Health experienced?

According to Rankiteo, KentuckyOne Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has KentuckyOne Health been affected by any supply chain cyber incidents ?

According to Rankiteo, KentuckyOne Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does KentuckyOne Health have SOC 2 Type 1 certification ?

According to Rankiteo, KentuckyOne Health is not certified under SOC 2 Type 1.

Does KentuckyOne Health have SOC 2 Type 2 certification ?

According to Rankiteo, KentuckyOne Health does not hold a SOC 2 Type 2 certification.

Does KentuckyOne Health comply with GDPR ?

According to Rankiteo, KentuckyOne Health is not listed as GDPR compliant.

Does KentuckyOne Health have PCI DSS certification ?

According to Rankiteo, KentuckyOne Health does not currently maintain PCI DSS compliance.

Does KentuckyOne Health comply with HIPAA ?

According to Rankiteo, KentuckyOne Health is not compliant with HIPAA regulations.

Does KentuckyOne Health have ISO 27001 certification ?

According to Rankiteo,KentuckyOne Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does KentuckyOne Health operate in ?

KentuckyOne Health operates primarily in the Hospitals and Health Care industry.

How many employees does KentuckyOne Health have ?

KentuckyOne Health employs approximately 726 people worldwide.

Does KentuckyOne Health own any subsidiaries ?

KentuckyOne Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does KentuckyOne Health have ?

KentuckyOne Health's official LinkedIn profile has approximately 7,017 followers.

What is the NAICS classification code for KentuckyOne Health ?

KentuckyOne Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does KentuckyOne Health have a Crunchbase profile ?

No, KentuckyOne Health does not have a profile on Crunchbase.

Does KentuckyOne Health have a LinkedIn profile ?

Yes, KentuckyOne Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/kentuckyone-health.

How many cybersecurity incidents has KentuckyOne Health experienced ?

As of July 2, 2026, Rankiteo reports that KentuckyOne Health has experienced 2 cybersecurity incidents.

How many peer or competitor companies does KentuckyOne Health have ?

KentuckyOne Health has an estimated 33,199 peer or competitor companies worldwide.

What types of cybersecurity incidents has KentuckyOne Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

KentuckyOne Health

Boost Score +25 with badge (5 left)

719

/1000

Moderate

744

/1000

Moderate

KentuckyOne Health Vendor Cyber Rating & Cyber Score

kentuckyonehealth.org

Add Your Compliance Badge

About KentuckyOne Health KentuckyOne Health, one of the largest and most comprehensive health systems in the Commonwealth, has more than 200 locations, including hospitals, physician groups, clinics, primary care centers, specialty institutes and home health agencies in Kentucky and southern Indiana. KentuckyOne Health is dedicated to bringing wellness, healing and hope to all, including the underserved.

KentuckyOne Health A.I CyberSecurity Scoring

Scoring History

KentuckyOne Health

KentuckyOne Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

KentuckyOne Health

Breach

100

05/2020

KEN1494123

KentuckyOne Health

Breach

04/2020

KEN1494123

Loading…

A.I.

KentuckyOne Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for KentuckyOne Health

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for KentuckyOne Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for KentuckyOne Health in 2026.

Incident Types KentuckyOne Health vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for KentuckyOne Health in 2026.

Incident History - KentuckyOne Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

KentuckyOne Health Subsidiaries

KentuckyOne Health

Hospitals and Health Care

Website: http://www.kentuckyonehealth.org

Company Size: 10,001+ employees

KentuckyOne Health CareersHospitals and Health Care

UofL HealthHospitals and Health Care

Loading…

KentuckyOne Health Similar Companies

Memorial Hermann Health System

cb memorialhermann.org

Advancing Health. Personalizing Care. Memorial Hermann Health System is a nonprofit, values-driven, community-owned health system dedicated to improving health. A fully integrated health system with more than 260 care delivery sites throughout the Greater Houston area, Memorial Hermann is committed to delivering safe, high-quality, patient-centered care and offers clinical expertise, innovation and cutting-edge technology to all patients.

Corewell Health

corewellhealth.org

People are at the heart of everything we do, and the inspiration for our legacy of outstanding outcomes, innovation, strong community partnerships, philanthropy and transparency. Corewell Health is a not-for-profit health system that provides health care and coverage with an exceptional team of 65,000+ dedicated people—including more than 12,000 physicians and advanced practice providers and more than 15,500 nurses providing care and services in 21 hospitals, 300+ outpatient locations and several post-acute facilities—and Priority Health, a provider-sponsored health plan serving more than 1.3 million members. Through experience and collaboration, we are reimagining a better, more equitable model of health and wellness. For more information, visit corewellhealth.org.

Memorial Healthcare System

mhs.net

Be at the heart of exceptional care. Team MHS Florida is an award-winning group of friends and colleagues at one of the largest not-for-profit health systems in the nation. We're 17,000 strong, advancing towards a brighter future together. We're passionate about the work we do, delivering deep, personalized care for patients and their families. That’s what we call the Memorial Experience. Memorial Healthcare System is proud to be an equal opportunity employer committed to workplace diversity. Memorial Healthcare System recruits, hires and promotes qualified candidates for employment opportunities without regard to race, color, age, religion, gender, gender identity or expression, sexual orientation, national origin, veteran status, disability, genetic information, or any factor prohibited by law. We are proud to offer Veteran’s Preference to former military, reservists and military spouses (including widows and widowers). You must indicate your status on your application to take advantage of this program. Employment is subject to post offer, pre-placement assessment, including drug testing.

Cleveland Clinic

cb clevelandclinic.org

Cleveland Clinic, located in Cleveland, Ohio, is a not-for-profit, multispecialty academic medical center that integrates clinical and hospital care with research and education. Founded in 1921 by four renowned physicians with a vision of providing outstanding patient care based upon the principles of cooperation, compassion and innovation, Cleveland Clinic has become one of the largest and most respected hospitals in the country. Cleveland Clinic facilities can be found throughout Northeast Ohio, as well as around the country and world including: Cleveland Clinic Abu Dhabi Cleveland Clinic Canada Cleveland Clinic Florida Cleveland Clinic London Cleveland Clinic Lou Ruvo Center for Brain Health - Las Vegas

Molina Healthcare

cb molinahealthcare.com

Molina Healthcare is a FORTUNE 500 company that is focused exclusively on government-sponsored health care programs for families and individuals who qualify for government sponsored health care. Molina Healthcare contracts with state governments and serves as a health plan providing a wide range of quality health care services to families and individuals. Molina Healthcare offers health plans in Arizona, California, Florida, Idaho, Illinois, Kentucky, Massachusetts, Michigan, Mississippi, Nevada, New Mexico, New York, Ohio, South Carolina, Texas, Utah, Virginia, Washington and Wisconsin. Molina also offers a Medicare product and has been selected in several states to participate in duals demonstration projects to manage the care for those eligible for both Medicaid and Medicare.

Advocate Health

advocatehealth.org

Advocate Health is redefining how, when and where care is delivered to help people live well. We’re providing equitable care for all in our communities and using our combined strength and expertise to deliver better outcomes at a lower cost. Headquartered in Charlotte, North Carolina, we have a combined footprint across six states – Alabama, Georgia, Illinois, North Carolina, South Carolina and Wisconsin – and maintain a strong organizational presence in Chicago and Milwaukee.

Children's Hospital of Philadelphia

cb chop.edu

Since its start in 1855 as the nation's first hospital devoted exclusively to caring for children, The Children's Hospital of Philadelphia has been the birthplace for many dramatic firsts in pediatric medicine. The Hospital has fostered medical discoveries and innovations that have improved pediatric healthcare and saved countless children’s lives. Today, The Children's Hospital of Philadelphia is one of the leading pediatric hospitals and research facilities in the world. Our 150 years of innovation and service to our patients, their families and our community reflect an ongoing commitment to exceptional patient care, training new generations of pediatric healthcare providers and pioneering significant research initiatives.

The Cigna Group

thecignagroup.com

The Cigna Group is a global health company committed to creating a better future built on the vitality of every individual and every community. We relentlessly challenge ourselves to partner and innovate solutions for better health. The Cigna Group includes products and services marketed under Cigna Healthcare, Evernorth Health Services or its subsidiaries. The Cigna Group maintains sales capabilities in more than 30 countries and jurisdictions, and has more than 190 million customer relationships around the world.

Lehigh Valley Health Network

lvhn.org

Lehigh Valley Health Network, part of Jefferson Health, is proud to be part of a leading integrated academic health care delivery system. Together, we’re among the top 15 not-for-profit health systems in the U.S., with 65,000 colleagues, 32 hospitals and more than 700 sites of care across eastern Pennsylvania and southern New Jersey. We’re committed to putting people first and pursuing excellence in over 95 clinical specialties, supported by a national doctoral research university and an expanded not-for-profit health plan.

Loading…

NEWS

KentuckyOne Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 30, 2014 07:00 AM

KentuckyOne Health CEO discusses merger experience

Ruth Brinkley, president and CEO of KentuckyOne Health, discusses the merger of St. Joseph Health System in Lexington and Jewish Hospital...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…