What is the official website of OCHIN, Inc. ?

The official website of OCHIN, Inc. is http://www.ochin.org.

What is OCHIN, Inc.'s cybersecurity risk score?

OCHIN, Inc. has an AI-generated cybersecurity risk score of 253 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has OCHIN, Inc. experienced?

According to Rankiteo, OCHIN, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OCHIN, Inc. been affected by any supply chain cyber incidents ?

According to Rankiteo, OCHIN, Inc. has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: TriZetto Provider Solutions (Incident ID: TRIOCHTER1770659813) OCHIN, Inc. (Incident ID: OCHBAL1769200436) TriZetto Healthcare Products (Incident ID: TRIOCHCOM1769016387) TriZetto Healthcare Products (Incident ID: TRIOCHPET1769201334) TriZetto Healthcare Products (Incident ID: TRIOCHADA1768955835) OCHIN, Inc. (Incident ID: OCHTRISAN1768259195) TriZetto Healthcare (Incident ID: OCHCOGTRI1772814516) TriZetto Healthcare Products (Incident ID: TRICHAOCH1772815208)

Does OCHIN, Inc. have SOC 2 Type 1 certification ?

According to Rankiteo, OCHIN, Inc. is not certified under SOC 2 Type 1.

Does OCHIN, Inc. have SOC 2 Type 2 certification ?

According to Rankiteo, OCHIN, Inc. does not hold a SOC 2 Type 2 certification.

Does OCHIN, Inc. comply with GDPR ?

According to Rankiteo, OCHIN, Inc. is not listed as GDPR compliant.

Does OCHIN, Inc. have PCI DSS certification ?

According to Rankiteo, OCHIN, Inc. does not currently maintain PCI DSS compliance.

Does OCHIN, Inc. comply with HIPAA ?

According to Rankiteo, OCHIN, Inc. is not compliant with HIPAA regulations.

Does OCHIN, Inc. have ISO 27001 certification ?

According to Rankiteo,OCHIN, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OCHIN, Inc. operate in ?

OCHIN, Inc. operates primarily in the Hospitals and Health Care industry.

How many employees does OCHIN, Inc. have ?

OCHIN, Inc. employs approximately 989 people worldwide.

Does OCHIN, Inc. own any subsidiaries ?

OCHIN, Inc. presently has no subsidiaries across any sectors.

How many LinkedIn followers does OCHIN, Inc. have ?

OCHIN, Inc.'s official LinkedIn profile has approximately 23,535 followers.

What is the NAICS classification code for OCHIN, Inc. ?

OCHIN, Inc. is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does OCHIN, Inc. have a Crunchbase profile ?

No, OCHIN, Inc. does not have a profile on Crunchbase.

Does OCHIN, Inc. have a LinkedIn profile ?

Yes, OCHIN, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ochin.

How many cybersecurity incidents has OCHIN, Inc. experienced ?

As of July 30, 2026, Rankiteo reports that OCHIN, Inc. has experienced 9 cybersecurity incidents.

How many peer or competitor companies does OCHIN, Inc. have ?

OCHIN, Inc. has an estimated 33,447 peer or competitor companies worldwide.

What types of cybersecurity incidents has OCHIN, Inc. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OCHIN, Inc.

Boost Score +25 with badge (5 left)

253

/1000

Critical

278

/1000

Critical

OCHIN, Inc. Vendor Cyber Rating & Cyber Score

ochin.org

Add Your Compliance Badge

OCHIN is a nonprofit leader in health care innovation and a trusted partner to a growing national provider network. Our aim is to provide knowledge solutions that help achieve well-being and good health for everyone. With more than 25 years of expertise and a 100% remote workforce, OCHIN provides the clinical insights and tailored technologies needed to expand patient access, grow and connect care teams, and improve the health of rural and medically underserved communities nationwide. We offer a generous compensation package and are committed to supporting our employees’ entire well-being by fostering a healthy work-life balance and opportunity for professional advancement. OCHIN is hiring for a number of new positions to meet

OCHIN, Inc. A.I CyberSecurity Scoring

Scoring History

OCHIN, Inc.

OCHIN, Inc. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

OCHIN, Inc.

Breach

2/2026

TriZetto Provid...

TRIOCHTER177065...

OCHIN, Inc.

Breach

1/2026

OCHIN, Inc.

OCHBAL176920043...

OCHIN, Inc.

Breach

1/2026

TRIMOSOCHREI177...

OCHIN, Inc.

Breach

12/2025

TriZetto Health...

TRIOCHCOM176901...

OCHIN, Inc.

Breach

12/2025

TriZetto Health...

TRIOCHPET176920...

OCHIN, Inc.

Breach

12/2025

TriZetto Health...

TRIOCHADA176895...

OCHIN, Inc.

Breach

10/2025

OCHIN, Inc.

OCHTRISAN176825...

OCHIN, Inc.

Breach

100

10/2025

TriZetto Health...

OCHCOGTRI177281...

OCHIN, Inc.

Breach

100

11/2024

TriZetto Health...

TRICHAOCH177281...

Loading…

A.I.

OCHIN, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OCHIN, Inc.

Incidents vs Hospitals and Health Care Industry Avg (This Year)

OCHIN, Inc. has 115.83% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

OCHIN, Inc. has 188.46% more incidents than the average of all companies with at least one recorded incident.

Incident Types OCHIN, Inc. vs Hospitals and Health Care Industry Avg (This Year)

OCHIN, Inc. reported 3 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 3 data breaches, compared to industry peers with at least 1 incident.

Incident History - OCHIN, Inc. (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OCHIN, Inc. Subsidiaries

Parent Company

OCHIN, Inc.

Hospitals and Health Care

Website: http://www.ochin.org

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

OCHIN, Inc. Similar Companies

RHÖN-KLINIKUM AG

rhoen-klinikum-ag.com

Die RHÖN‐KLINIKUM AG ist einer der größten Gesundheitsdienstleister in Deutschland. Die Kliniken bieten exzellente Medizin mit direkter Anbindung zu Universitäten und Forschungseinrichtungen. An den fünf Standorten Campus Bad Neustadt, Klinikum Frankfurt (Oder), Universitätsklinikum Gießen und Universitätsklinikum Marburg (UKGM) sowie der Zentralklinik Bad Berka werden jährlich rund 855.000 Patienten behandelt. Über 18.100 Mitarbeitende sind im Unternehmen beschäftigt. Das innovative RHÖN-Campus-Konzept für eine sektorenübergreifende und zukunftsweisende Gesundheitsversorgung im ländlichen Raum, die konsequente Fortsetzung des schrittweisen digitalen Wandels im Unternehmen sowie die strategische Partnerschaft mit Asklepios sind wichtige Säulen der Unternehmensstrategie. Die RHÖN-KLINIKUM AG ist ein eigenständiges Unternehmen unter dem Dach der Asklepios Kliniken GmbH & Co. KGaA.

Ascension

ascension.org

Answering God's call to bring health, healing and hope to all. Ascension is one of the nation’s leading non-profit and Catholic health systems, with a Mission of delivering compassionate, personalized care to all, with special attention to those most vulnerable. In FY2025, Ascension provided $1.7 billion in care of persons living in poverty and other community benefit programs along with $1.8 billion of unreimbursed care for Medicare patients. Across 16 states and the District of Columbia, Ascension’s network encompasses approximately 97,300 associates, 25,300 aligned providers, 90 wholly owned or consolidated hospitals, and ownership interests in 29 additional hospitals through partnerships. Ascension also operates 22 senior living facilities and a variety of other care sites offering a range of healthcare services.

Region Hovedstaden

regionh.dk

Det handler om liv. Om at bringe liv til verden og skabe livskvalitet. Om at redde liv og forbedre liv. Som medarbejder i Region Hovedstaden træder du ind i en verden af muligheder og mangfoldighed med plads til dine ambitioner. Du er en del af et stærkt fagligt miljø, hvor vi har fingeren på pulsen og gør hinanden bedre. Det er noget af det, vi gerne vil vise dig på Region Hovedstadens LinkedIn-profil. Gå ind på www.regionh.dk/job og læs mere om jobmulighederne.

Beth Israel Deaconess Medical Center

bidmc.org

Beth Israel Deaconess Medical Center (BIDMC) is part of Beth Israel Lahey Health, a new health care system that brings together academic medical centers and teaching hospitals, community and specialty hospitals, more than 4,000 physicians and 35,000 employees in a shared mission to expand access to great care and advance the science and practice of medicine through groundbreaking research and education. BIDMC is a world-class teaching hospital of Harvard Medical School and is located in the heart of Boston. We are passionate about caring for our patients like they are family, finding new cures, using the finest and the latest technologies, and teaching and inspiring caregivers of tomorrow. We put people at the center of everything we do, because we believe in medicine that puts people first. Interested in a career at BIDMC? Check out www.jobs.bidmc.org.

UMC Utrecht

werkenbijumcutrecht.nl

The University Medical Center Utrecht is one of the largest academic healthcare institutions in the Netherlands. We provide the best healthcare for today’s patients, and we also work towards a healthy society in the future. Our organization has three core tasks: care, research and education. Care for patients and employees Every day, we devote ourselves to providing adults and children with the best possible care, based on their specific needs and wishes. But we also care for our 11,000 employees. Because they have the knowledge, experience and expertise that we need in order to continue improving the care we provide. Our values Our mission is to continue to be a leading international institute. To achieve this, we ensure that: • We are involved and committed; • We constantly innovate and never stop learning; • We work together and take responsibility. Preserving the highest level of care Our scientific research is based on the world around us. Together with national and international partners, we invest in innovation and research in order to keep the care we provide at the highest level. Focus is essential, which is why we have selected six priority areas: • Brain • Infection & Immunity • Circulatory Health • Personalized Cancer Care • RM & Stem Cells • Child Health

Guy's and St Thomas' NHS Foundation Trust

cb nhs.uk

One of the largest Trusts in the UK, Guy’s and St Thomas’ NHS Foundation Trust comprises five of the UK’s best known hospitals – Guy’s, St Thomas’, Evelina London Children’s Hospital, Royal Brompton and Harefield – as well as community services in Lambeth and Southwark, all with a long history of high quality care, clinical excellence, research and innovation. We work closely with a wide range of health and care partners to deliver the best care to our local population, and we play an active role in the integrated care systems (ICS) in south east and north west London. We have a long tradition of clinical and scientific achievement and – as part of King’s Health Partners – we are one of England’s eight academic health sciences centres (AHSCs), bringing together world-class clinical services, teaching and research. We are rated Good overall by the Care Quality Commission, and have one of the lowest mortality rates in the country. With around 23,700 staff, we are one of the largest employers locally. We aim to reflect the diversity of the local communities we serve and continue to develop new and existing partnerships with local people, patients, neighbouring NHS organisations, local authorities and charitable bodies and GPs. The dedication and skills of our employees lie at the heart of our organisation. We strive to recruit and retain the best staff to ensure that our services are high quality, safe and patient focused.

Memorial Healthcare System

mhs.net

Be at the heart of exceptional care. Team MHS Florida is an award-winning group of friends and colleagues at one of the largest not-for-profit health systems in the nation. We're 17,000 strong, advancing towards a brighter future together. We're passionate about the work we do, delivering deep, personalized care for patients and their families. That’s what we call the Memorial Experience. Memorial Healthcare System is proud to be an equal opportunity employer committed to workplace diversity. Memorial Healthcare System recruits, hires and promotes qualified candidates for employment opportunities without regard to race, color, age, religion, gender, gender identity or expression, sexual orientation, national origin, veteran status, disability, genetic information, or any factor prohibited by law. We are proud to offer Veteran’s Preference to former military, reservists and military spouses (including widows and widowers). You must indicate your status on your application to take advantage of this program. Employment is subject to post offer, pre-placement assessment, including drug testing.

SSM Health

cb ssmhealth.com

SSM Health is a Catholic, not-for-profit, fully integrated health system dedicated to advancing innovative, sustainable, and compassionate care for patients and communities throughout the Midwest and beyond. The organization’s 40,000 team members and 13,900 providers are committed to fulfilling SSM Health’s Mission: “Through our exceptional health care services, we reveal the healing presence of God.” With care delivery sites in Illinois, Missouri, Oklahoma and Wisconsin, SSM Health includes hospitals, physician offices, outpatient and virtual care services, comprehensive home care and hospice services, a fully transparent pharmacy benefit company, a health insurance company and an accountable care organization. It is one of the largest employers in every community it serves. For more information, visit ssmhealth.com Visit jobs.ssmhealth.com to fulfill your calling with SSM Health. Together – We Care.

EsSalud

gob.pe

El Seguro Social de Salud, EsSalud, es un organismo público descentralizado, con personería jurídica de derecho público interno, adscrito al Sector Trabajo y Promoción Social. Tiene por finalidad dar cobertura a los asegurados y sus derechohabientes, a través del otorgamiento de prestaciones de prevención, promoción, recuperación, rehabilitación, prestaciones económicas, y prestaciones sociales que corresponden al régimen contributivo de la Seguridad Social en Salud, así como otros seguros de riesgos humanos.

Loading…

NEWS

OCHIN, Inc. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 08:00 AM

Trizetto Data Breach: PHI of 3.4 Million Individuals Exposed

It has been more than four months since TriZetto Provider Solutions discovered unauthorized access to its IT environment, and it has now...

Read Article

February 09, 2026 07:27 PM

Terry Reilly says some patients’ personal health details may have been exposed

Terry Reilly says names, addresses, DOBs, SSNs and insurance information may be part of the data involved in a reported breach.

Read Article

January 05, 2026 08:00 AM

Planned Parenthood Northern California Data Breach Exposes SSNs & Medical Info

On Dec. 10, 2025, Planned Parenthood Northern California (PPNorCal) learned from its business associate OCHIN about a significant...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

OCHIN, Inc. Vendor Cyber Rating & Cyber Score

OCHIN, Inc. A.I CyberSecurity Scoring

OCHIN, Inc. CyberSecurity News & History

OCHIN, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OCHIN, Inc.

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OCHIN, Inc. vs Hospitals and Health Care Industry Avg (This Year)

Incident History - OCHIN, Inc. (X = Date, Y = Severity)

OCHIN, Inc. Subsidiaries

Parent Company

OCHIN, Inc.

OCHIN, Inc. Similar Companies

RHÖN-KLINIKUM AG

Ascension

Region Hovedstaden

Beth Israel Deaconess Medical Center

UMC Utrecht

Guy's and St Thomas'​ NHS Foundation Trust

Memorial Healthcare System

SSM Health

EsSalud

OCHIN, Inc. CyberSecurity News

Trizetto Data Breach: PHI of 3.4 Million Individuals Exposed

Terry Reilly says some patients’ personal health details may have been exposed

Planned Parenthood Northern California Data Breach Exposes SSNs & Medical Info

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

OCHIN, Inc. CyberSecurity News & History

OCHIN, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OCHIN, Inc.

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OCHIN, Inc. vs Hospitals and Health Care Industry Avg (This Year)

Incident History - OCHIN, Inc. (X = Date, Y = Severity)

OCHIN, Inc. Subsidiaries

Parent Company

OCHIN, Inc.

OCHIN, Inc. Similar Companies

RHÖN-KLINIKUM AG

Ascension

Region Hovedstaden

Beth Israel Deaconess Medical Center

UMC Utrecht

Guy's and St Thomas'​ NHS Foundation Trust

Memorial Healthcare System

SSM Health

EsSalud

OCHIN, Inc. CyberSecurity News

Trizetto Data Breach: PHI of 3.4 Million Individuals Exposed

Terry Reilly says some patients’ personal health details may have been exposed

Planned Parenthood Northern California Data Breach Exposes SSNs & Medical Info

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Guy's and St Thomas' NHS Foundation Trust

Guy's and St Thomas' NHS Foundation Trust