What is the official website of Northern Light Health ?

The official website of Northern Light Health is https://northernlighthealth.org/.

What is Northern Light Health's cybersecurity risk score?

Northern Light Health has an AI-generated cybersecurity risk score of 715 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Northern Light Health experienced?

According to Rankiteo, Northern Light Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Northern Light Health been affected by any supply chain cyber incidents ?

According to Rankiteo, Northern Light Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Northern Light Health have SOC 2 Type 1 certification ?

According to Rankiteo, Northern Light Health is not certified under SOC 2 Type 1.

Does Northern Light Health have SOC 2 Type 2 certification ?

According to Rankiteo, Northern Light Health does not hold a SOC 2 Type 2 certification.

Does Northern Light Health comply with GDPR ?

According to Rankiteo, Northern Light Health is not listed as GDPR compliant.

Does Northern Light Health have PCI DSS certification ?

According to Rankiteo, Northern Light Health does not currently maintain PCI DSS compliance.

Does Northern Light Health comply with HIPAA ?

According to Rankiteo, Northern Light Health is not compliant with HIPAA regulations.

Does Northern Light Health have ISO 27001 certification ?

According to Rankiteo,Northern Light Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Northern Light Health operate in ?

Northern Light Health operates primarily in the Hospitals and Health Care industry.

How many employees does Northern Light Health have ?

Northern Light Health employs approximately 2,180 people worldwide.

Does Northern Light Health own any subsidiaries ?

Northern Light Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does Northern Light Health have ?

Northern Light Health's official LinkedIn profile has approximately 13,547 followers.

What is the NAICS classification code for Northern Light Health ?

Northern Light Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Northern Light Health have a Crunchbase profile ?

No, Northern Light Health does not have a profile on Crunchbase.

Does Northern Light Health have a LinkedIn profile ?

Yes, Northern Light Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/northern-light-health.

How many cybersecurity incidents has Northern Light Health experienced ?

As of June 26, 2026, Rankiteo reports that Northern Light Health has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Northern Light Health have ?

Northern Light Health has an estimated 33,139 peer or competitor companies worldwide.

What types of cybersecurity incidents has Northern Light Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NLH

Boost Score +25 with badge (5 left)

715

/1000

Moderate

740

/1000

Moderate

Northern Light Health Vendor Cyber Rating & Cyber Score

northernlighthealth.org

Add Your Compliance Badge

Northern Light Health exists to make healthcare work for you. That is our mission. That is our purpose. Northern Light Health is the most expansive integrated health care system in Maine. We provide care to people from Portland to Presque Isle and from Blue Hill to Greenville. We are comprised of ten member hospitals with 584 long-term beds, a single physician-led medical group, eight nursing homes, five emergency transport members, 37 primary care locations, and we employ more than 12,000 people in Maine.

NLH A.I CyberSecurity Scoring

Scoring History

NLH

Northern Light Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Northern Light Heal...

Data Leak

09/2021

NOR225825123

Northern Light Heal...

Ransomware

100

5/2020

NOR905072625

Loading…

A.I.

NLH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NLH

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Northern Light Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Northern Light Health in 2026.

Incident Types NLH vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Northern Light Health in 2026.

Incident History - NLH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Northern Light Health Subsidiaries

Parent Company

NLH

Hospitals and Health Care

Website: https://northernlighthealth.org/

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

Northern Light Health Similar Companies

Ascension

ascension.org

Answering God's call to bring health, healing and hope to all. Ascension is one of the nation’s leading non-profit and Catholic health systems, with a Mission of delivering compassionate, personalized care to all, with special attention to those most vulnerable. In FY2025, Ascension provided $1.7 billion in care of persons living in poverty and other community benefit programs along with $1.8 billion of unreimbursed care for Medicare patients. Across 16 states and the District of Columbia, Ascension’s network encompasses approximately 99,000 associates, 22,300 aligned providers, 95 wholly owned or consolidated hospitals, and ownership interests in 26 additional hospitals through partnerships. Ascension also operates 30 senior living facilities and a variety of other care sites offering a range of healthcare services.

Brigham and Women's Hospital

brighamandwomens.org

Boston's Brigham and Women's Hospital (BWH) is an international leader in virtually every area of medicine and has been the site of pioneering breakthroughs that have improved lives around the world. A major teaching hospital of Harvard Medical School, BWH has a legacy of excellence that continues to grow. With two outstanding hospitals, over 150 outpatient practices, and over 1,200 physicians, we serve patients from New England, throughout the United States, and from 120 countries around the world. The BWH name is a reflection of our history. In 1980 three of Boston’s oldest and most prestigious Harvard Medical School teaching hospitals - the Peter Bent Brigham Hospital, the Robert Breck Brigham Hospital, and the Boston Hospital for Women – merged to form Brigham and Women’s Hospital. As a national leader in improving health care quality and safety, we have helped to develop some of the industry’s best practices including computerized physician order entry (CPOE) to prevent medication errors. The CPOE is now a nationally-accepted safety practice. The BWH Biomedical Research Institute (BRI) is one of the most powerful biomedical research institutes in the world and the second largest recipient of National Institutes of Health (NIH) funding among independent hospitals in the United States. BWH has long had great success in research as measured by the number of important discoveries made, the size and scope of its research portfolio and the volume of publications annually. BWH is a training ground for physicians, nurses, and allied health professionals. We have 1,100 trainees in over 140 of the most sought after training programs in the world, and also host Harvard Medical School students in rotations throughout our programs. As our global health services expand, our clinical trainees have rich opportunities to contribute and learn in challenging environments around the world. Brigham and Women's Hospital is an EEO, AA, VEVRAA Employer.

Dignity Health

commonspirit.careers

We provide quality, compassionate health care at more than 40 hospitals and care centers that are serving communities across California, Arizona and Nevada every minute of every day. And while not everyone may live near a major medical facility, Dignity Health is making health care more accessible by bringing resources closer to where people live and work. In urban and rural communities alike, residents of all ages and backgrounds have access to primary care, preventive treatment, clinical support, chronic disease management, trauma services, and a host of medical and therapeutic specializations. With several different ways to activate your search, let us help you to quickly and easily find an affordable, quality medical facility located close to where you need it, when you need it.

Health Service Executive

hse.ie

Our purpose is to provide safe, high quality health and personal social services to the population of Ireland. Our vision is a healthier Ireland with a high quality health service valued by all. Our Workforce The health service is the largest employer in the state with over 110,000 whole time equivalents (WTEs) (not including home helps) employed. Over 70,000 are employed directly by the HSE with the remaining 40,000 employed by voluntary hospitals and agencies. Our vision for healthcare is to put people at the heart of everything we do – we are committed to delivering high quality safe healthcare to our service users, communities and the wider population. Our staff are at the core of the delivery of healthcare services, working within and across all care settings in communities, hospitals and healthcare offices.

Massachusetts General Hospital

cb massgeneral.org

Guided by the needs of our patients and their families, Massachusetts General Hospital aims to deliver the very best health care in a safe, compassionate environment; to advance that care through innovative research and education; and, to improve the health and well-being of the diverse communities we serve. Visit our careers page! http://www.mghcareers.org

Providence

providence.org

Every day, 119,000 compassionate caregivers serve patients and communities through Providence St. Joseph Health, a national, Catholic, not-for-profit health system, driven by a belief that health is a human right. Rooted in the founding missions of the Sisters of Providence and the Sisters of St. Joseph of Orange, courageous women ahead of their time who brought health care and other social services to the American West when it was still a rugged, untamed frontier, we share a singular commitment to improve the health of all. From our earliest days, we’ve met new challenges by pioneering new solutions. Today, with 51 hospitals, 829 clinics and a comprehensive range of services, we strive to meet the needs of communities across Alaska, California, Montana, New Mexico, Oregon, Texas and Washington through a diverse family of Catholic, other faith-based and mission-driven secular organizations. Now, as we face a new frontier—a changing health care landscape—we draw upon their pioneering and compassionate spirit to plan for the next century of health for a better world, especially for the poor and vulnerable. If you need treatment, please visit www.providence.org to locate a health care provider.

Rede D'Or

rededorsaoluiz.com.br

A Rede D’Or é a maior rede de saúde da América Latina. São 79 hospitais e mais de 60 clínicas oncológicas com presença nos estados de AL, BA, CE, DF, MA, MG, MS, PA, PB, PE, PR, RJ, SE, SP. Referência em qualidade técnica, a Rede D’Or atua em serviços complementares como banco de sangue, diálise e ambulatórios de diversas especialidades. A Rede D’Or também investe em inovação e pesquisa clínica por meio do IDOR - Instituto D’Or de Pesquisa e Ensino. Siga a Rede D’Or também em: Instagram: @rededor_oficial Facebook: https://www.facebook.com/rededor YouTube: https://www.youtube.com/user/rededorsaoluiz

Mediclinic

mediclinic.co.za

Mediclinic Southern Africa is a private hospital group operating in South Africa and Namibia focused on providing acute care, specialist-orientated, multi-disciplinary hospital services and related service offerings. We place science at the heart of our care process by striving to provide evidence-based care of the highest standard. The group currently operates 53 private hospitals and five day clinics throughout South Africa and three hospitals in Namibia with more than 8 000 beds in total. Mediclinic Southern Africa is a wholly owned subsidiary of the international private healthcare group Mediclinic International PLC, listed on the LSE (London Stock Exchange) with a secondary listing on the JSE (Johannesburg Stock Exchange) and the NSX (Namibian Stock Exchange). Mediclinic International comprises 78 hospitals, five sub-acute hospitals, 13 day case clinics and 21 outpatient clinics. Hirslanden operates 18 hospitals, two day case clinics and three outpatient clinics in Switzerland with more than 1 900 inpatient beds; Mediclinic Southern Africa operates 53 hospitals, five sub-acute hospitals and nine day case clinics with more than 8 500 inpatient beds; and Mediclinic Middle East operates seven hospitals, two day case clinics and 18 outpatient clinics with more than 900 inpatient beds in the United Arab Emirates. Mediclinic also holds a 29.9% interest in Spire Healthcare Group plc, a leading private healthcare group based in the United Kingdom and listed on the LSE.

Oregon Health & Science University

ohsu.edu

At OHSU, we deliver breakthroughs for better health. We're driven by the belief that better health starts with innovations in the lab, in the classroom, at the bedside and in our communities. From cancer to Alzheimer's to cardiovascular care, we collaborate every day to identify and deliver new ways to understand disease, treat illness and train the next generation of scientists and health professionals. It takes all of us - from scientists, clinicians and nurses to a top-notch professional staff. Join us.

Loading…

NEWS

Northern Light Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 05, 2026 08:00 AM

Covenant Health data breach impacted more than 284K Mainers, far exceeding initial reports

MAINE, USA — Covenant Health, the Massachusetts-based parent company of St. Mary's Health System in Lewiston and St. Joseph Healthcare in...

Read Article

January 03, 2026 08:00 AM

Cyber threats, cost blowouts: $969 million health overhaul facing rocky start

A huge project modernising the medical records of NSW patients has received a fail mark on its cybersecurity just months before it is due to...

Read Article

June 11, 2025 07:00 AM

Central Maine Healthcare continues system restoration efforts after suspected cybersecurity issue

Central Maine Healthcare says it is making progress in getting its systems back online after unusual activity was detected in its computer network last week.

Read Article

June 02, 2025 07:00 AM

Central Maine Healthcare tackles suspected cybersecurity issue; hospitals remain open

Central Maine Healthcare shut down its information technology systems on June 1 after technicians detected unusual activity within its computer network.

Read Article

March 21, 2024 09:19 AM

Responding to the healthcare clearinghouse cyber incident

The reported healthcare clearinghouse cyberattack in February 2024 1 highlighted the growing vulnerabilities in modern healthcare.

Read Article

February 02, 2024 08:00 AM

Cyberattack on AnyDesk: Breaking Down the Cybersecurity Breach

The cyberattack on AnyDesk came to light through a public statement, detailing the results of a security audit conducted in response to...

Read Article

February 03, 2023 06:25 PM

Data Breaches That Have Happened This Year (2026 Update)

Business of all sizes have fallen victim to data breaches over the last few years, resulting in millions of dollars being lost.

Read Article

September 11, 2020 07:00 AM

Inova Health System latest hospital impacted by ransomware attack on software vendor

Inova Health System is among a dozen health systems affected by a ransomware attack at a third-party software vendor.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56785

SUMMARY

FlatPress versions prior to commit 10be83c, contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields are rendered without proper output encoding in Smarty templates. Attackers can inject arbitrary HTML and JavaScript through these fields to execute malicious scripts in browsers of viewers including administrators, or bypass URL scheme validation to inject javascript: or data: URIs.

Published

Date2026-06-23

Updated

Date2026-06-23

RISK INFORMATION (Score: 8.2)

cvss3

Base Score: 8.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

cvss4

Base Score: 8.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-54588

SUMMARY

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthenticated attacker can poison the `redirect_uri` sent to the Identity Provider, causing the IdP to redirect the victim's authorization code to an attacker-controlled server - resulting in full account takeover with no credentials required. Versions 4.2.4 and 4.3.3 patch the issue.

Published

Date2026-06-23

Updated

Date2026-06-23

RISK INFORMATION (Score: 9.6)

cvss3

Base Score: 9.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-48493

SUMMARY

Snipe-IT is an IT asset/license management system. In versions prior to 8.6.0, a user with only users.edit can send a PATCH to /api/v1/users/{their_own_id} and grant themselves any permission except admin and superuser — for example `assets.view`, `assets.create`, `reports.view`, import, etc. The issue is patched in version 8.6.0.

Published

Date2026-06-23

Updated

Date2026-06-23

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N

Impact Score

4.2

Exploitability

1.2

REFERENCES

CVE-2026-47693

SUMMARY

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export functionality. User-controlled data — specifically the username field — is written to exported CSV files without sanitizing formula trigger characters (=, +, -, @). When an administrator exports activity logs and opens the resulting CSV in a spreadsheet application (Microsoft Excel, LibreOffice Calc, Google Sheets), any formula stored in a username is executed by the application. This can be used for phishing attacks against administrators or data exfiltration. Versions 4.2.4 and 4.3.3 patch the issue.

Published

Date2026-06-23

Updated

Date2026-06-23

RISK INFORMATION (Score: 6.9)

cvss3

Base Score: 6.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Impact Score

4.7

Exploitability

1.7

REFERENCES

CVE-2026-12164

SUMMARY

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Published

Date2026-06-23

Updated

Date2026-06-23

RISK INFORMATION (Score: 4.4)

cvss3

Base Score: 4.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

0.8

REFERENCES

https://www.fortra.com/security/advisories/product-security/fi-2026-010

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…