What is the official website of R1 RCM ?

The official website of R1 RCM is http://www.r1rcm.com.

What is R1 RCM's cybersecurity risk score?

R1 RCM has an AI-generated cybersecurity risk score of 767 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has R1 RCM experienced?

According to Rankiteo, R1 RCM currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has R1 RCM been affected by any supply chain cyber incidents ?

According to Rankiteo, R1 RCM has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does R1 RCM have SOC 2 Type 1 certification ?

According to Rankiteo, R1 RCM is not certified under SOC 2 Type 1.

Does R1 RCM have SOC 2 Type 2 certification ?

According to Rankiteo, R1 RCM does not hold a SOC 2 Type 2 certification.

Does R1 RCM comply with GDPR ?

According to Rankiteo, R1 RCM is not listed as GDPR compliant.

Does R1 RCM have PCI DSS certification ?

According to Rankiteo, R1 RCM does not currently maintain PCI DSS compliance.

Does R1 RCM comply with HIPAA ?

According to Rankiteo, R1 RCM is not compliant with HIPAA regulations.

Does R1 RCM have ISO 27001 certification ?

According to Rankiteo,R1 RCM is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does R1 RCM operate in ?

R1 RCM operates primarily in the Hospitals and Health Care industry.

How many employees does R1 RCM have ?

R1 RCM employs approximately 21,760 people worldwide.

Does R1 RCM own any subsidiaries ?

R1 RCM presently has no subsidiaries across any sectors.

How many LinkedIn followers does R1 RCM have ?

R1 RCM's official LinkedIn profile has approximately 328,585 followers.

What is the NAICS classification code for R1 RCM ?

R1 RCM is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does R1 RCM have a Crunchbase profile ?

No, R1 RCM does not have a profile on Crunchbase.

Does R1 RCM have a LinkedIn profile ?

Yes, R1 RCM maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/r1-rcm.

How many cybersecurity incidents has R1 RCM experienced ?

As of August 28, 2026, Rankiteo reports that R1 RCM has experienced 1 cybersecurity incidents.

How many peer or competitor companies does R1 RCM have ?

R1 RCM has an estimated 33,746 peer or competitor companies worldwide.

What types of cybersecurity incidents has R1 RCM faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

R1 RCM

Boost Score +25 with badge (5 left)

767

/1000

Fair

792

/1000

Fair

R1 RCM Vendor Cyber Rating & Cyber Score

r1rcm.com

Add Your Compliance Badge

R1 is the leader in healthcare revenue management, helping providers achieve new levels of performance through smart orchestration. A pioneer in the industry, R1 created the first Healthcare Revenue Operating System: a modular, intelligent platform that integrates automation, AI, and human expertise to strengthen the entire revenue cycle. With more than 20 years of experience, R1 partners with 1,000 providers, including 95 of the top 100 U.S. health systems, and handles over 270 million payer transactions annually. This scale provides unmatched operational insight to help healthcare organizations unlock greater long-term value. To learn more, visit: https://www.r1rcm.com.

R1 RCM A.I CyberSecurity Scoring

Scoring History

R1 RCM

R1 RCM CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

R1 RCM

Ransomware

100

08/2020

R1R145229123

Loading…

A.I.

R1 RCM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for R1 RCM

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for R1 RCM in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for R1 RCM in 2026.

Incident Types R1 RCM vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for R1 RCM in 2026.

Incident History - R1 RCM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

R1 RCM Subsidiaries

Parent Company

R1 RCM

Hospitals and Health Care

Website: http://www.r1rcm.com

Company Size: 10,000+ employees

No subsidiary data available for this company.

Loading…

R1 RCM Similar Companies

Encompass Health

encompasshealth.com

Encompass Health is the largest owner and operator of rehabilitation hospitals in the United States. With a national footprint that includes more than 170 hospitals in 39 states and Puerto Rico, the Company provides high-quality, compassionate rehabilitative care for patients recovering from a major injury or illness, using advanced technology and innovative treatments to maximize recovery. Encompass Health is ranked as one of Fortune’s 100 Best Companies to Work For and Modern Healthcare’s Best Places to Work in Healthcare.

Cleveland Clinic

clevelandclinic.org

Cleveland Clinic, located in Cleveland, Ohio, is a not-for-profit, multispecialty academic medical center that integrates clinical and hospital care with research and education. Founded in 1921 by four renowned physicians with a vision of providing outstanding patient care based upon the principles of cooperation, compassion and innovation, Cleveland Clinic has become one of the largest and most respected hospitals in the country. Cleveland Clinic facilities can be found throughout Northeast Ohio, as well as around the country and world including: Cleveland Clinic Abu Dhabi Cleveland Clinic Canada Cleveland Clinic Florida Cleveland Clinic London Cleveland Clinic Lou Ruvo Center for Brain Health - Las Vegas

RHÖN-KLINIKUM AG

rhoen-klinikum-ag.com

Die RHÖN‐KLINIKUM AG ist einer der größten Gesundheitsdienstleister in Deutschland. Die Kliniken bieten exzellente Medizin mit direkter Anbindung zu Universitäten und Forschungseinrichtungen. An den fünf Standorten Campus Bad Neustadt, Klinikum Frankfurt (Oder), Universitätsklinikum Gießen und Universitätsklinikum Marburg (UKGM) sowie der Zentralklinik Bad Berka werden jährlich rund 855.000 Patienten behandelt. Über 18.100 Mitarbeitende sind im Unternehmen beschäftigt. Das innovative RHÖN-Campus-Konzept für eine sektorenübergreifende und zukunftsweisende Gesundheitsversorgung im ländlichen Raum, die konsequente Fortsetzung des schrittweisen digitalen Wandels im Unternehmen sowie die strategische Partnerschaft mit Asklepios sind wichtige Säulen der Unternehmensstrategie. Die RHÖN-KLINIKUM AG ist ein eigenständiges Unternehmen unter dem Dach der Asklepios Kliniken GmbH & Co. KGaA.

UPMC

upmc.com

UPMC is a world-renowned, nonprofit health care provider and insurer committed to delivering exceptional, people-centered care and community services. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC is shaping the future of health through clinical and technological innovation, research, and education. Dedicated to advancing the well-being of our diverse communities, we provide nearly $2 billion annually in community benefits, more than any other health system in Pennsylvania. Our 100,000 employees — including more than 5,000 physicians — care for patients across more than 40 hospitals and 800 outpatient sites in Pennsylvania, New York, and Maryland, as well as overseas. UPMC Insurance Services covers more than 4 million members, providing the highest-quality care at the most affordable price. To learn more, visit UPMC.com.

UCHealth

cb uchealth.org

At UCHealth, we do things differently. We strive to promote individual and community health and leave no question unanswered along the way. We’re driven to improve and optimize health care. Our network of nationally-recognized hospitals, clinic locations and health care providers extends throughout Colorado, southern Wyoming and western Nebraska. We deliver excellent care close to home, no matter where you might live. Our success is defined by more than our patient volumes or treatment outcomes. It’s about building a team of exceptional people, from our clinical staff to our expert physicians, who consistently do what is right for the individuals we are honored to serve. UCHealth, a 501(c) (3) health system, was formed in 2012 to increase access to innovative and advanced patient care, realize supply chain and IT efficiencies, and to better serve patients throughout the Rocky Mountain region by combining academic-based and community-focused medicine. Together, the clinics and hospitals within UCHealth can offer the most advanced treatments to improve the lives of patients and their families in Colorado and beyond.

UT MD Anderson

MDAnderson.org

The University of Texas MD Anderson Cancer Center is one of the world’s most respected centers devoted exclusively to cancer patient care, research, education and prevention. Its sole mission is to end cancer for patients and their families around the world. UT MD Anderson provides cancer care in Houston’s Texas Medical Center, as well as several locations throughout the Greater Houston Area. UT MD Anderson also collaborates with hospitals, health systems and organizations across the U.S. and around the world to advance our mission to end cancer. UT MD Anderson was created in 1941 as part of The University of Texas System, and, in 1971, it became one of the nation’s original three comprehensive cancer centers designated by the National Cancer Act of 1971. U.S. News & World Report’s “Best Hospitals” rankings has named UT MD Anderson the nation's top hospital for cancer care. The institution has been named one of the nation’s top two hospitals for cancer care every year since the survey began in 1990. The recognition reflects the passion of our 27,000 extraordinary employees and 1,000 volunteers for providing exceptional care to our patients and their families, and for realizing our mission to #EndCancer. You can view all of our career opportunities at Careers.MDAnderson.Org.

Piedmont

piedmont.org

Piedmont is empowering Georgians by changing health care. We continue to fuel Georgia’s growth through safe, cost-effective, high-quality care close to home through an integrated health care system that provides a hassle-free, unified experience. We are a private, not-for-profit organization with more than 12,000 donors annually that for centuries has sought to make a positive difference in every life we touch in the communities we serve. Across our 2,171 physical locations we care for more than 4.5 million patients and serve communities that comprise 85 percent of Georgia’s population. This includes 27 hospitals, 113 immediate care locations, 1,875 Piedmont Clinic physician practices and more than 3,600 Piedmont Clinic members. Our patients conveniently engage with Piedmont online, as they scheduled more than 560,000 online appointments and over 120,000 virtual visits. With more than 47,000 care givers we are the largest Georgia-based private employer of Georgians, who all came for the job, but stayed for the people. In 2024 and 2023, Piedmont has earned recognition from Newsweek as one of America’s Greatest Workplaces for Diversity and also as one of America's Greatest Workplaces for Women. In 2022, Forbes ranked Piedmont on its list of the Best Large Employers in the United States. Piedmont provided more than $607 million in community impact in Fiscal Year 2024. For more information, or booking your next appointment, visit piedmont.org.

Advocate Health

advocatehealth.org

Advocate Health is redefining how, when and where care is delivered to help people live well. We’re providing equitable care for all in our communities and using our combined strength and expertise to deliver better outcomes at a lower cost. Headquartered in Charlotte, North Carolina, we have a combined footprint across seven states – Alabama, Georgia, Illinois, Michigan, North Carolina, South Carolina and Wisconsin – and maintain a strong organizational presence in Chicago and Milwaukee.

Rush University Medical Center

rush.edu

Rush University Medical Center is an academic medical center that includes a 671-bed hospital serving adults and children, the 61-bed Johnston R. Bowman Health Center and Rush University. Rush University is home to one of the first medical colleges in the Midwest and one of the nation's top-ranked nursing colleges, as well as graduate programs in allied health, health systems management and biomedical research. The medical center also offers more than 70 highly selective residency and fellowship programs in medical and surgical specialties and subspecialties. For more than 170 years, Rush has been leading the way in developing innovative and often life-saving treatments. Today, Rush is a thriving center for basic and clinical research, with physicians and scientists involved in hundreds of research projects developing and testing the effectiveness and safety of new therapies and medical devices. In addition to its mission in patient care, education and research, Rush maintains a strong commitment to the community. Rush reaches out to the Chicago community through such offerings as the Rush Community Services Initiatives Program, an umbrella for several student-led outreach programs designed to address the social and health care needs of residents in neighboring communities.

Loading…

NEWS

R1 RCM CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 12, 2025 07:00 AM

R1 RCM & Dignity Health to Pay $675,000 to Settle Data Breach Lawsuit

A $675000 settlement has been agreed upon to resolve a class action data breach lawsuit against R1 RCM Inc., a revenue cycle management...

Read Article

June 02, 2025 07:00 AM

Cybersecurity firm continues real estate growth, buys Sunnyvale building at a discount

Fortinet expands real estate, buying two Sunnyvale offices at a discount as part of its global property acquisition strategy.

Read Article

February 11, 2025 08:00 AM

Financialization through Health IT, Part II: From Electronic Health Systems to AI

The financialization of the healthcare industry is handing over enormous control to Silicon Valley firms and private equity investors -- and...

Read Article

January 23, 2025 08:00 AM

Healthcare IT Faces Disruption and Innovation Challenges as GOP Budget Cuts Loom: Insights From Black Book Weekly Survey

As Federal Budget Cuts Threaten Healthcare Systems, RCM Vendors and Providers Strategize for Resilience.

Read Article

August 01, 2024 07:00 AM

R1 RCM to Go Private in Deal With TowerBrook, CD&R

R1 RCM has agreed to be taken private in a deal that values the healthcare revenue-cycle-management company at about $8.9 billion.

Read Article

July 03, 2024 07:00 AM

New Mountain Capital Proposes Buyout of R1 RCM

Private-equity firm New Mountain Capital submitted a bid to buy R1 RCM in a deal that values the healthcare revenue-cycle-management provider at around $5.58...

Read Article

July 02, 2024 07:00 AM

New Mountain Goes Solo in Pursuit of R1 RCM Buyout

Private-equity firm New Mountain Capital plans to pursue a buyout of R1 RCM after failing to reach an agreement on a joint takeover of the revenue-cycle-...

Read Article

March 19, 2024 07:00 AM

R1 RCM Tells Two Top Holders to End Buyout Talks

R1 RCM has told its two biggest shareholders to end talks on a buyout of the healthcare revenue-cycle-management provider.

Read Article

February 27, 2024 08:00 AM

Change Healthcare clicked the wrong link

Good morning,. I hope everyone is having a great time at ViVE! I couldn't make it this year, but you guys better be Vive'ing in my stead.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…