Nhs-lothian vs Utsw - Cyber Risk Comparison & Security Rating

Comparison Overview

NHS Lothian

UT Southwestern Medical Center

NHS Lothian

Edinburgh, GB

Last Update: 31/03/2026

View Profile

Between 750 and 799

https://www.nhslothian.scot/Pages/default.aspx

795/1000Fair

NHS Lothian provides a comprehensive range of primary, community-based and acute hospital services for the populations of Edinburgh, Midlothian, East Lothian and West Lothian.

NAICS:62

NAICS Definition:Health Care and Social Assistance

Employees:6,761

Subsidiaries:0

12-month incidents

Known data breaches

Attack type number

UT Southwestern Medical Center

5323 Harry Hines Boulevard, Dallas, Texas, US, 75390

Last Update: 02/09/2026

View Profile

Between 750 and 799

http://www.utsouthwestern.edu/

786/1000Fair

UT Southwestern is an academic medical center, world-renowned for its research, regarded among the best in the country for medical education and for clinical and scientific training, and nationally recognized for the quality of care its faculty provides to patients at U...

NAICS:62

NAICS Definition:Health Care and Social Assistance

Employees:18,678

Subsidiaries:13

12-month incidents

Known data breaches

Attack type number

Compliance Ranges Comparison

Based On Specific Ai Models Category

NHS Lothian

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

UT Southwestern Medical Center

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for NHS Lothian in 2026.

Incidents

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UT Southwestern Medical Center in 2026.

Incidents

Incident History - NHS Lothian (X = Date, Y = Severity)

NHS Lothian cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Incident History - UT Southwestern Medical Center (X = Date, Y = Severity)

UT Southwestern Medical Center cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...

NHS Lothian

Incidents

🔒 Incident : Breach

NHS0302603110125

🔒 Incident : Breach

NHS3032230110125

🔒 Incident : Breach

NHS1732417110125

UT Southwestern Medical Center

Incidents

No explicit notable incidents reported.

FAQ

Between NHS Lothian company and UT Southwestern Medical Center company, which one has the best AI Cybersecurity Score ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced more cyber incidents in the past ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced more cyber incidents this year ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced at least one ransomware attack ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced at least one data breach ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced at least one targeted cyberattack ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has experienced at least one vulnerability ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one holds the most compliance certifications ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one holds the fewest compliance certifications ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has the most subsidiaries ?

Between NHS Lothian company and UT Southwestern Medical Center company, which one has the largest number of employees ?

Between NHS Lothian and UT Southwestern Medical Center, which company holds both SOC 2 Type 1 certifications ?

Between NHS Lothian and UT Southwestern Medical Center, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified - NHS Lothian or UT Southwestern Medical Center ?

Which company is PCI DSS compliant - NHS Lothian or UT Southwestern Medical Center ?

Between NHS Lothian and UT Southwestern Medical Center, which company complies with HIPAA regulations for healthcare data ?

Between NHS Lothian and UT Southwestern Medical Center, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-100739

SUMMARY

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 7.3)

CVSS2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

IMPACT SCORE

3.4

EXPLOITABILITY

3.9

REFERENCES

CVE-2026-94408

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 4.9)

CVSS3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

1.2

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688

CVE-2026-94400

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685

CVE-2026-94399

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684

CVE-2026-94398

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683