Comparison Overview

NASTAD

VS

Massachusetts Council on Gaming and Health

NASTAD

444 North Capitol Street NW, Washington, 20001, US
Last Update: 2026-04-03

NASTAD is a leading non-partisan non-profit association that represents public health officials who administer HIV and hepatitis programs in the U.S. We work to advance the health and dignity of people living with and impacted by HIV/AIDS, viral hepatitis, and intersecting epidemics by strengthening governmental public health through advocacy, capacity building, and social justice. Each of NASTAD’s seven programmatic teams—Health Care Access, Health Systems Integration, Policy & Legislative Affairs, Hepatitis, Prevention, Health Equity, and Drug User Health—interpret and influence policies, conduct trainings, offer technical assistance, and provide advocacy mobilization for U.S. health departments to improve health outcomes for people living with HIV and hepatitis. NASTAD's vision is a world committed to ending HIV/AIDS, viral hepatitis, and intersecting epidemics.

NAICS: 92312
NAICS Definition: Administration of Public Health Programs
Employees: 106
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Massachusetts Council on Gaming and Health

120 Washington Street, Salem, 01970-6396, US
Last Update: 2026-04-03
Between 750 and 799

The Massachusetts Council on Gaming and Health (MACGH) was founded to help individuals struggling with gambling. Today, we’ve grown into a private, non-profit public health agency offering a range of services for those impacted by gambling and gaming. Our work engages industry stakeholders, clinicians, policymakers, and community professionals from across the globe. And 40 years later, we still support individuals and their loved ones. Our commitment strives to balance public health priorities with a people-first model for gambling and gaming.

NAICS: 92312
NAICS Definition: Administration of Public Health Programs
Employees: 41
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nastad.jpeg
NASTAD
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/massachusetts-council-gaming-and-heath.jpeg
Massachusetts Council on Gaming and Health
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
NASTAD
100%
Compliance Rate
0/4 Standards Verified
Massachusetts Council on Gaming and Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Public Health Industry Average (This Year)

No incidents recorded for NASTAD in 2026.

Incidents vs Public Health Industry Average (This Year)

No incidents recorded for Massachusetts Council on Gaming and Health in 2026.

Incident History — NASTAD (X = Date, Y = Severity)

NASTAD cyber incidents detection timeline including parent company and subsidiaries

Incident History — Massachusetts Council on Gaming and Health (X = Date, Y = Severity)

Massachusetts Council on Gaming and Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nastad.jpeg
NASTAD
Incidents

No Incident

https://images.rankiteo.com/companyimages/massachusetts-council-gaming-and-heath.jpeg
Massachusetts Council on Gaming and Health
Incidents

No Incident

FAQ

NASTAD company demonstrates a stronger AI Cybersecurity Score compared to Massachusetts Council on Gaming and Health company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Massachusetts Council on Gaming and Health company has disclosed a higher number of cyber incidents compared to NASTAD company.

In the current year, Massachusetts Council on Gaming and Health company and NASTAD company have not reported any cyber incidents.

Neither Massachusetts Council on Gaming and Health company nor NASTAD company has reported experiencing a ransomware attack publicly.

Neither Massachusetts Council on Gaming and Health company nor NASTAD company has reported experiencing a data breach publicly.

Neither Massachusetts Council on Gaming and Health company nor NASTAD company has reported experiencing targeted cyberattacks publicly.

Neither NASTAD company nor Massachusetts Council on Gaming and Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds any compliance certifications.

Neither company holds any compliance certifications.

Neither NASTAD company nor Massachusetts Council on Gaming and Health company has publicly disclosed detailed information about the number of their subsidiaries.

NASTAD company employs more people globally than Massachusetts Council on Gaming and Health company, reflecting its scale as a Public Health.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds SOC 2 Type 1 certification.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds SOC 2 Type 2 certification.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds ISO 27001 certification.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds PCI DSS certification.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds HIPAA certification.

Neither NASTAD nor Massachusetts Council on Gaming and Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.

Description

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.