Comparison Overview

Select Health Network

VS

Prisma Health

Select Health Network

314 W Catalpa Dr, Mishawaka, Indiana, 46545, US
Last Update: 2025-12-27
View Profile
Between 750 and 799
https://www.selecthealthnetwork.com/

Select Health Network is a Physician Hospital Organization which began operations in 1994 and provides a comprehensive physician network in St. Joseph and Marshall Counties, Indiana. In total, Select Health Network offers access to over 770 providers including specialists, primary care physicians and mid-level providers.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 32
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

Prisma Health

300 E McBee Ave, None, Greenville, South Carolina, US, 29601
Last Update: 2025-12-25
Between 750 and 799
http://careers.prismahealth.org

Prisma Health is the largest not-for-profit health organization in South Carolina, serving more than 1.2 million patients annually. Our facilities in the Greenville and Columbia surrounding markets are dedicated to improving the health of all South Carolinians through improved clinical quality, access to care and patient experience, while also addressing the rising cost of health care. Our Purpose: Inspire health. Serve with compassion. Be the difference.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 12,865
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/selecthealthnetwork.jpeg
Select Health Network
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/prisma-health.jpeg
Prisma Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Select Health Network
100%
Compliance Rate
0/4 Standards Verified
Prisma Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Select Health Network in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Prisma Health in 2025.

Incident History — Select Health Network (X = Date, Y = Severity)

Select Health Network cyber incidents detection timeline including parent company and subsidiaries

Incident History — Prisma Health (X = Date, Y = Severity)

Prisma Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/selecthealthnetwork.jpeg
Select Health Network
Incidents

Date Detected: 5/2019
Type:Data Leak
Attack Vector: Email Account Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/prisma-health.jpeg
Prisma Health
Incidents

Date Detected: 10/2019
Type:Data Leak
Attack Vector: Stolen Credentials
Blog: Blog

FAQ

Prisma Health company demonstrates a stronger AI Cybersecurity Score compared to Select Health Network company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Select Health Network and Prisma Health have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Prisma Health company and Select Health Network company have not reported any cyber incidents.

Neither Prisma Health company nor Select Health Network company has reported experiencing a ransomware attack publicly.

Neither Prisma Health company nor Select Health Network company has reported experiencing a data breach publicly.

Neither Prisma Health company nor Select Health Network company has reported experiencing targeted cyberattacks publicly.

Neither Select Health Network company nor Prisma Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither Select Health Network nor Prisma Health holds any compliance certifications.

Neither company holds any compliance certifications.

Prisma Health company has more subsidiaries worldwide compared to Select Health Network company.

Prisma Health company employs more people globally than Select Health Network company, reflecting its scale as a Hospitals and Health Care.

Neither Select Health Network nor Prisma Health holds SOC 2 Type 1 certification.

Neither Select Health Network nor Prisma Health holds SOC 2 Type 2 certification.

Neither Select Health Network nor Prisma Health holds ISO 27001 certification.

Neither Select Health Network nor Prisma Health holds PCI DSS certification.

Neither Select Health Network nor Prisma Health holds HIPAA certification.

Neither Select Health Network nor Prisma Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line.

Published
Date
2025-12-27
Updated
Date
2025-12-27
Risk Information
cvss3
Base: 5.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
References
Description

A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Affected is the function Upload of the file Admin/Home/Controller/ProductImageController.class.php of the component Backend. Such manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2025-12-27
Updated
Date
2025-12-27
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \x99) in a prepared statement parameter may cause the quoting function PQescapeStringConn to return NULL, leading to a null pointer dereference in pdo_parse_params() function. This may lead to crashes (segmentation fault) and affect the availability of the target server.

Published
Date
2025-12-27
Updated
Date
2025-12-27
Risk Information
cvss4
Base: 8.2
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server.

Published
Date
2025-12-27
Updated
Date
2025-12-27
Risk Information
cvss3
Base: 6.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
References
Description

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.

Published
Date
2025-12-27
Updated
Date
2025-12-27
Risk Information
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References