Comparison Overview

Sanford Health

VS

WellSpan Health

Sanford Health

-, Sioux Falls, US
Last Update: 2025-12-09
View Profile
Between 700 and 749
http://www.sanfordhealth.org

Sanford Health is the largest rural health system in the U.S. Our organization is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. Headquartered in Sioux Falls, South Dakota, we serve more than one million patients and 220,000 health plan members across 250,000 square miles. Our integrated health system has 47 medical centers, 2,800 physicians and advanced practice providers, 170 clinical investigators and research scientists, more than 200 Good Samaritan Society senior care locations, and world clinics in eight countries around the globe. Learn more about our commitment to shaping the future of rural health care at sanfordhealth.org or Sanford Health News.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 15,769
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

WellSpan Health

45 Monument Road, Suite 200, York, PA, US, 17403
Last Update: 2025-12-09
Between 750 and 799
http://www.wellspan.org/about-wellspan

WellSpan Health’s vision is to reimagine healthcare through the delivery of comprehensive, equitable health and wellness solutions throughout our continuum of care. As an integrated delivery system focused on leading in value-based care, we encompass more than 2,500 employed providers, more than 250 locations, nine award-winning hospitals, home care and a behavioral health organization serving central Pennsylvania and northern Maryland. Our high-performing Medicare Accountable Care Organization (ACO) is the region’s largest and one of the best in the nation. With a team 23,000 strong, WellSpan experts provide a range of services, from wellness and employer services solutions to advanced care for complex medical and behavioral conditions. Our clinically integrated network of 3,000 aligned physicians and advanced practice providers is dedicated to providing the highest quality and safety, inspiring our patients and communities to be their healthiest. Interested in careers at WellSpan? Find available roles at joinwellspan.org.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 10,975
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/sanford-health.jpeg
Sanford Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/wellspan-health.jpeg
WellSpan Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Sanford Health
100%
Compliance Rate
0/4 Standards Verified
WellSpan Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Sanford Health in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for WellSpan Health in 2025.

Incident History — Sanford Health (X = Date, Y = Severity)

Sanford Health cyber incidents detection timeline including parent company and subsidiaries

Incident History — WellSpan Health (X = Date, Y = Severity)

WellSpan Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/sanford-health.jpeg
Sanford Health
Incidents

Date Detected: 05/2023
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/wellspan-health.jpeg
WellSpan Health
Incidents

No Incident

FAQ

WellSpan Health company demonstrates a stronger AI Cybersecurity Score compared to Sanford Health company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Sanford Health company has historically faced a number of disclosed cyber incidents, whereas WellSpan Health company has not reported any.

In the current year, WellSpan Health company and Sanford Health company have not reported any cyber incidents.

Neither WellSpan Health company nor Sanford Health company has reported experiencing a ransomware attack publicly.

Sanford Health company has disclosed at least one data breach, while the other WellSpan Health company has not reported such incidents publicly.

Neither WellSpan Health company nor Sanford Health company has reported experiencing targeted cyberattacks publicly.

Neither Sanford Health company nor WellSpan Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither Sanford Health nor WellSpan Health holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Sanford Health company nor WellSpan Health company has publicly disclosed detailed information about the number of their subsidiaries.

Sanford Health company employs more people globally than WellSpan Health company, reflecting its scale as a Hospitals and Health Care.

Neither Sanford Health nor WellSpan Health holds SOC 2 Type 1 certification.

Neither Sanford Health nor WellSpan Health holds SOC 2 Type 2 certification.

Neither Sanford Health nor WellSpan Health holds ISO 27001 certification.

Neither Sanford Health nor WellSpan Health holds PCI DSS certification.

Neither Sanford Health nor WellSpan Health holds HIPAA certification.

Neither Sanford Health nor WellSpan Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References