What is the official website of Mosaic Health ?

The official website of Mosaic Health is https://www.MosaicHealth.org.

What is Mosaic Health's cybersecurity risk score?

Mosaic Health has an AI-generated cybersecurity risk score of 707 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Mosaic Health experienced?

According to Rankiteo, Mosaic Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mosaic Health been affected by any supply chain cyber incidents ?

According to Rankiteo, Mosaic Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mosaic Health have SOC 2 Type 1 certification ?

According to Rankiteo, Mosaic Health is not certified under SOC 2 Type 1.

Does Mosaic Health have SOC 2 Type 2 certification ?

According to Rankiteo, Mosaic Health does not hold a SOC 2 Type 2 certification.

Does Mosaic Health comply with GDPR ?

According to Rankiteo, Mosaic Health is not listed as GDPR compliant.

Does Mosaic Health have PCI DSS certification ?

According to Rankiteo, Mosaic Health does not currently maintain PCI DSS compliance.

Does Mosaic Health comply with HIPAA ?

According to Rankiteo, Mosaic Health is not compliant with HIPAA regulations.

Does Mosaic Health have ISO 27001 certification ?

According to Rankiteo,Mosaic Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mosaic Health operate in ?

Mosaic Health operates primarily in the Hospitals and Health Care industry.

How many employees does Mosaic Health have ?

Mosaic Health employs approximately 36 people worldwide.

Does Mosaic Health own any subsidiaries ?

Mosaic Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mosaic Health have ?

Mosaic Health's official LinkedIn profile has approximately 43 followers.

What is the NAICS classification code for Mosaic Health ?

Mosaic Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Mosaic Health have a Crunchbase profile ?

No, Mosaic Health does not have a profile on Crunchbase.

Does Mosaic Health have a LinkedIn profile ?

Yes, Mosaic Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mosaichealthny.

How many cybersecurity incidents has Mosaic Health experienced ?

As of July 14, 2026, Rankiteo reports that Mosaic Health has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Mosaic Health have ?

Mosaic Health has an estimated 33,298 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mosaic Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mosaic Health

Boost Score +25 with badge (5 left)

707

/1000

Moderate

732

/1000

Moderate

Mosaic Health Vendor Cyber Rating & Cyber Score

MosaicHealth.org

Add Your Compliance Badge

Now more than ever, our door’s open. To all. When it comes to your health, sometimes you’re not sure where to turn. Especially when the unexpected happens. It’s easier—and more affordable—to get health care than you think. Our door’s always open, no matter who you are or your insurance status. And Mosaic Health has caring providers that offer a whole range of services, from medical to dental to mental health. You deserve personal respect and peace of mind. With four locations, community dentistry, and a school-based health center, Mosaic Health offers convenient, welcoming access for you and your family. We can open the doors to important healthcare that works with your busy schedule and stretched budget. From vaccinations to sick

Mosaic Health A.I CyberSecurity Scoring

Scoring History

Mosaic Health

Mosaic Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mosaic Health

Breach

1/2026

TRIMOSOCHREI177...

Loading…

A.I.

Mosaic Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mosaic Health

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Mosaic Health has 29.08% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Mosaic Health has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Mosaic Health vs Hospitals and Health Care Industry Avg (This Year)

Mosaic Health reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - Mosaic Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mosaic Health Subsidiaries

Parent Company

Mosaic Health

Hospitals and Health Care

Website: https://www.MosaicHealth.org

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

Mosaic Health Similar Companies

Emory Healthcare

emoryhealthcare.org

Emory Healthcare is the most comprehensive health care system in Georgia. We offer 11 hospitals, the Emory Clinic, more than 250 provider locations, and more than 2,800 physicians specializing in 70 different medical subspecialties. Meaning we can provide treatments and services that may not be available at local community hospitals. That's the Emory Difference.

Cleveland Clinic

cb clevelandclinic.org

Cleveland Clinic, located in Cleveland, Ohio, is a not-for-profit, multispecialty academic medical center that integrates clinical and hospital care with research and education. Founded in 1921 by four renowned physicians with a vision of providing outstanding patient care based upon the principles of cooperation, compassion and innovation, Cleveland Clinic has become one of the largest and most respected hospitals in the country. Cleveland Clinic facilities can be found throughout Northeast Ohio, as well as around the country and world including: Cleveland Clinic Abu Dhabi Cleveland Clinic Canada Cleveland Clinic Florida Cleveland Clinic London Cleveland Clinic Lou Ruvo Center for Brain Health - Las Vegas

UHS

cb uhs.com

One of the nation’s largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (NYSE: UHS) has built an impressive record of achievement and performance, growing since its inception into a Fortune 300 corporation. Headquartered in King of Prussia, PA, UHS has 99,000 employees. Through its subsidiaries, UHS operates 29 acute care hospitals, 331 behavioral health facilities, 60 outpatient and other facilities in 39 U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com UHS is a registered trademark of UHS of Delaware, Inc., a subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company that operates through its subsidiaries. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent there is any reference to “UHS” or “UHS facilities” on this website, including any statements, articles or other publications contained herein which relates to healthcare or management operations, they are referring to Universal Health Services, Inc.’s subsidiaries. Further, the terms “we,” “us,” “our” or “the company” in such context similarly refer to the operations of the subsidiaries of Universal Health Services, Inc. Any reference to employment at UHS or employees of UHS refers to employment with one of the subsidiaries of Universal Health Services, Inc.

UnityPoint Health

cb unitypoint.org

As an integrated health system, we provide care throughout Iowa, western Illinois and southern Wisconsin in not-for-profit hospitals, clinics and home health settings. Each year, we serve nearly 8 million patient visits of all different types, including around 100,000 surgeries and deliver more than 20,000 babies. Whatever stage of life you’re in, our goal is to make your care easier and more personal. At UnityPoint Health, we put people first. And we start from the inside out. We care deeply about making UnityPoint Health a great place to work because our team members are the compassionate core of who we are and how we serve. We’re proud to be recognized as a Top 150 Place to Work in Healthcare by Becker’s Healthcare for four years in a row. We've worked diligently to invest in our team members across key areas, including: o Team Member Empowerment o Leadership Effectiveness o Community Impact and Engagement o Career Development Visit www.unitypoint.org/join-our-team to explore career opportunities at UnityPoint Health.

Penn Medicine, University of Pennsylvania Health System

cb pennmedicine.org

Penn Medicine is a world leader in academic medicine, setting the standard for cutting-edge research, compassionate patient care, and the education of future health care professionals. From founding the nation’s first hospital and medical school to pioneering Nobel Prize-winning mRNA vaccines and lifesaving cancer therapies, Penn Medicine continues to show the world what comes next. Home to more than 49,000 team members, Penn Medicine includes the University of Pennsylvania Health System and the Perelman School of Medicine. Together, our clinicians and scientists drive discoveries that transform patient care and improve lives across Pennsylvania, New Jersey, and beyond. Penn Medicine’s seven hospitals—the Hospital of the University of Pennsylvania, Penn Presbyterian Medical Center, Pennsylvania Hospital, Chester County Hospital, Lancaster General Health, Penn Medicine Princeton Health, and Doylestown Health—along with hundreds of outpatient sites and home care services, provide exceptional care throughout the region. At Penn Medicine, innovation and collaboration fuel everything we do. Our mission is to advance knowledge and improve health through research, patient care, and education in an inclusive culture that embraces diversity, fosters innovation, and sustains our legacy of excellence. Learn more: www.pennmedicine.org Read the latest stories: www.pennmedicine.org/news

Memorial Healthcare System

mhs.net

Be at the heart of exceptional care. Team MHS Florida is an award-winning group of friends and colleagues at one of the largest not-for-profit health systems in the nation. We're 17,000 strong, advancing towards a brighter future together. We're passionate about the work we do, delivering deep, personalized care for patients and their families. That’s what we call the Memorial Experience. Memorial Healthcare System is proud to be an equal opportunity employer committed to workplace diversity. Memorial Healthcare System recruits, hires and promotes qualified candidates for employment opportunities without regard to race, color, age, religion, gender, gender identity or expression, sexual orientation, national origin, veteran status, disability, genetic information, or any factor prohibited by law. We are proud to offer Veteran’s Preference to former military, reservists and military spouses (including widows and widowers). You must indicate your status on your application to take advantage of this program. Employment is subject to post offer, pre-placement assessment, including drug testing.

Select Medical

cb selectmedical.com

Select Medical made a commitment more than 20 years ago to deliver an exceptional patient care experience that promotes healing and recovery in a compassionate environment. We have honored that promise by helping define the nation's standard of excellence in specialized hospital and rehabilitative care. Today, we have grown to more than 50,000 colleagues caring for more than 82,000 patients every day across our care continuum. Select Medical is one of the largest operators of critical illness recovery hospitals, rehabilitation hospitals, outpatient rehabilitation centers and occupational health centers in the United States. Select Medical and its parent company, Select Medical Holdings Corporation (NYSE: SEM), are based in Mechanicsburg, Pennsylvania. We are honored to be recognized by Forbes as one of America’s Best-In-State Employers in Maryland, Missouri and Pennsylvania for 2021. Select Medical provides equal employment [and affirmative action] opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability. http://careers.selectmedical.com

NMC Healthcare

nmc.ae

NMC Healthcare is one of the largest private healthcare networks in the United Arab Emirates. Since 1975, we have provided high quality, personalised, and compassionate care to our patients and are proud to have earned the trust of millions of people in the UAE and around the world. ---------------------------------------- DISCLAIMER: Fraudulent Job Offers ---------------------------------------- It has come to our attention that fake job offers have been circulated under the name of NMC Healthcare by certain individuals/entities claiming that they are representatives or subsidiaries or under contract with NMC Healthcare. If you receive any unauthorised, suspicious, or fraudulent offers or interview calls, please send an email to [email protected] for formal verification. If you believe you have been a victim of a recruitment fraud, you are encouraged to approach the law enforcement agencies immediately. ---------------------------- MOH Number: ZLD03Z9F ----------------------------

Rochester Regional Health

rochesterregional.org

Rochester Regional Health, headquartered in Rochester, NY, is an integrated health services organization serving the people of Western New York, the Finger Lakes, St. Lawrence County, and beyond. We are dedicated to helping our community stay healthy and live fulfilling lives. Together, we find the best way forward to where you want to be. From western to northern New York, rest assured; we’ve got you covered. We see you. We’re with you. We’re here to uplift you—to treat people, not symptoms. To treat you well. Our experience is nation-leading, neighbor-driven, and rooted in generations of real-life care. Today, we offer comprehensive care from 500+ locations, including 8 hospitals; more than 300 primary and specialty practices, rehabilitation centers and ambulatory campuses; innovative senior services, facilities and independent housing; a wide range of behavioral health services; and ACM Global Laboratories, a global leader in patient and clinical trials. Whatever you need, from every age, to every stage, across every service line, and every symptom... Whatever it is, we’re here for it. Learn more about Rochester Regional Health at careers.rochesterregional.org. Rochester Regional Health is an Equal Opportunity/Affirmative Action Employer. Minority/Female/Disability/Veteran

Loading…

NEWS

Mosaic Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 03:53 PM

CE Mark Granted to Cynosure Lutronic’s Mosaic 3D

Cynosure Lutronic gains CE Mark approval for the Mosaic 3D, a product touted as the next generation of non-ablative fractional laser.

Read Article

March 09, 2026 07:00 AM

Mosaic Medicine Launches Executive Women’s Health & Hormone Program in Bradenton

Mosaic Medicine's Executive Women's Health & Hormone Optimization Program provides personalized hormone evaluation for women in Bradenton,...

Read Article

March 06, 2026 08:47 AM

Iran Conflict Expands Across Region with Airstrikes, Cyberattacks, and Strait of Hormuz Disruptions

On March 12-13, 2026, the military conflict between Iran and the opposing coalition expanded across multiple fronts in the Middle East,

Read Article

March 05, 2026 08:00 AM

Mosaic Clinical Technologies Announces FDA Breakthrough Device Designation for Cognita's Generative AI Model for Radiology

Mosaic Clinical Technologies, a leading healthcare technology company, has announced that the U.S. Food and Drug Administration (FDA) has...

Read Article

February 13, 2026 08:00 AM

Healthcare Innovation Reaches Bradenton as Mosaic Medicine Introduces Membership Based Family Care

Putting family health first. At Mosaic Medicine, our membership-based Direct Primary Care model ensures personalized, accessible,...

Read Article

January 22, 2026 08:00 AM

Mosaic Family Health Appoints Leif Elsmo to Lead Organization’s Next Chapter

APPLETON, Wis., January 22, 2026--Mosaic Family Health:

Read Article

December 30, 2025 08:00 AM

80 Hospitals May Have Been Affected by the Oracle Health Data Breach

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a security alert about the recently confirmed Oracle data breach.

Read Article

December 18, 2025 08:00 AM

Cybersecurity and hospitals: Fewer victims in 2025, but looming threats

The number of people affected by breaches dropped over the past year, but health systems face serious challenges.

Read Article

December 04, 2025 08:00 AM

Months after hackers broke into Cerner’s network, some patients don't know their health data was stolen

Patients of NKC Health in North Kansas City finally learned in late November that their data was compromised in "massive" data breach.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…