Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

Primary Health Care LtdPrimary Health Care Ltd
VS
Greater Paris University Hospitals - AP-HPGreater Paris University Hospitals - AP-HP
Primary Health Care Ltd

Primary Health Care Ltd

711 Victoria Street, Hamilton, 3204, NZ

Last Update: 09/05/2026

View Profile
Between 750 and 799
https://www.phcl.health.nz
762/1000Fair

Primary Health Care Ltd is the largest not-for-profit operator of general practice in Aotearoa New Zealand. We have over 250 staff working across 10 rural and urban practices in Hamilton, Taranaki, Tokoroa and Waihi Beach - caring for around 71,000 enrolled patients. W...

NAICS:62
NAICS Definition:Health Care and Social Assistance
Employees:23
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0
Greater Paris University Hospitals - AP-HP

Greater Paris University Hospitals - AP-HP

55, Boulevard Diderot, Paris, 75012, FR

Last Update: 01/04/2026

View Profile
Between 750 and 799
http://www.aphp.fr
796/1000Fair

AP-HP (Greater Paris University Hospitals) is a European world-renowned university hospital. Its 39 hospitals treat 8 million people every year: in consultation, emergency, during scheduled or home hospitalizations. The AP-HP provides a public health service for everyo...

NAICS:62
NAICS Definition:Health Care and Social Assistance
Employees:37,495
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
Primary Health Care Ltd

Primary Health Care Ltd

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Greater Paris University Hospitals - AP-HP

Greater Paris University Hospitals - AP-HP

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Primary Health Care Ltd in 2026.

Incidents

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Greater Paris University Hospitals - AP-HP in 2026.

Incidents

Incident History - Primary Health Care Ltd (X = Date, Y = Severity)

Primary Health Care Ltd cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Greater Paris University Hospitals - AP-HP (X = Date, Y = Severity)

Greater Paris University Hospitals - AP-HP cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Primary Health Care Ltd

Primary Health Care Ltd

Incidents
No explicit notable incidents reported.
Greater Paris University Hospitals - AP-HP

Greater Paris University Hospitals - AP-HP

Incidents
No explicit notable incidents reported.

FAQ

Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has the best AI Cybersecurity Score ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced more cyber incidents in the past ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced more cyber incidents this year ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced at least one ransomware attack ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced at least one data breach ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced at least one targeted cyberattack ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has experienced at least one vulnerability ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one holds the most compliance certifications ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one holds the fewest compliance certifications ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has the most subsidiaries ?
Between Primary Health Care Ltd company and Greater Paris University Hospitals - AP-HP company, which one has the largest number of employees ?
Between Primary Health Care Ltd and Greater Paris University Hospitals - AP-HP, which company holds both SOC 2 Type 1 certifications ?
Between Primary Health Care Ltd and Greater Paris University Hospitals - AP-HP, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Primary Health Care Ltd or Greater Paris University Hospitals - AP-HP ?
Which company is PCI DSS compliant - Primary Health Care Ltd or Greater Paris University Hospitals - AP-HP ?
Between Primary Health Care Ltd and Greater Paris University Hospitals - AP-HP, which company complies with HIPAA regulations for healthcare data ?
Between Primary Health Care Ltd and Greater Paris University Hospitals - AP-HP, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-63261
SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailable to all users.

PUBLISHED
Date2026-07-21
UPDATED
Date2026-07-21
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
IMPACT SCORE
3.6
EXPLOITABILITY
2.8
CVE-2026-63260
SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

PUBLISHED
Date2026-07-21
UPDATED
Date2026-07-21
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
IMPACT SCORE
3.6
EXPLOITABILITY
2.8
CVE-2026-63259
SUMMARY

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.

PUBLISHED
Date2026-07-21
UPDATED
Date2026-07-21
RISK INFORMATION (Score: 4.3)
CVSS3
Base Score: 4.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
2.8
CVE-2026-63145
SUMMARY

Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management endpoint performs an insufficient authorization check. The endpoint validates only a coarse privilege level but does not verify that the requesting user has access to the specific Machine Learning job or notification resources provided in the request. As a result, a low-privileged user with Machine Learning access in any Kibana space can manipulate Machine Learning audit and notification records for arbitrary jobs—including jobs in other spaces or belonging to other users—by leveraging Kibana's internally elevated credentials to write to restricted Machine Learning system indices that the user cannot access directly.

PUBLISHED
Date2026-07-21
UPDATED
Date2026-07-21
RISK INFORMATION (Score: 4.3)
CVSS3
Base Score: 4.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
2.8
CVE-2026-63144
SUMMARY

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

PUBLISHED
Date2026-07-21
UPDATED
Date2026-07-21
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
IMPACT SCORE
3.6
EXPLOITABILITY
2.8