Comparison Overview

Services Australia

VS

Assurance Maladie

Services Australia

Canberra, AU
Last Update: 2025-12-10

We deliver Medicare, Centrelink and Child Support payments and services.

NAICS: 92
NAICS Definition: Public Administration
Employees: 7,701
Subsidiaries: 0
12-month incidents
1
Known data breaches
1
Attack type number
1

Assurance Maladie

Last Update: 2025-12-09

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

NAICS: 92
NAICS Definition: Public Administration
Employees: 23,361
Subsidiaries: 112
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/services-australia.jpeg
Services Australia
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/assurance-maladie.jpeg
Assurance Maladie
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Services Australia
100%
Compliance Rate
0/4 Standards Verified
Assurance Maladie
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Government Administration Industry Average (This Year)

Services Australia has 53.85% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Government Administration Industry Average (This Year)

No incidents recorded for Assurance Maladie in 2025.

Incident History — Services Australia (X = Date, Y = Severity)

Services Australia cyber incidents detection timeline including parent company and subsidiaries

Incident History — Assurance Maladie (X = Date, Y = Severity)

Assurance Maladie cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/services-australia.jpeg
Services Australia
Incidents

Date Detected: 12/2025
Type:Breach
Attack Vector: Phishing, Third-Party Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/assurance-maladie.jpeg
Assurance Maladie
Incidents

Date Detected: 03/2022
Type:Breach
Attack Vector: Email Compromise
Blog: Blog

Date Detected: 03/2022
Type:Breach
Attack Vector: Account Hacking
Blog: Blog

FAQ

Assurance Maladie company demonstrates a stronger AI Cybersecurity Score compared to Services Australia company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Assurance Maladie company has faced a higher number of disclosed cyber incidents historically compared to Services Australia company.

In the current year, Services Australia company has reported more cyber incidents than Assurance Maladie company.

Neither Assurance Maladie company nor Services Australia company has reported experiencing a ransomware attack publicly.

Both Assurance Maladie company and Services Australia company have disclosed experiencing at least one data breach.

Neither Assurance Maladie company nor Services Australia company has reported experiencing targeted cyberattacks publicly.

Neither Services Australia company nor Assurance Maladie company has reported experiencing or disclosing vulnerabilities publicly.

Neither Services Australia nor Assurance Maladie holds any compliance certifications.

Neither company holds any compliance certifications.

Assurance Maladie company has more subsidiaries worldwide compared to Services Australia company.

Assurance Maladie company employs more people globally than Services Australia company, reflecting its scale as a Government Administration.

Neither Services Australia nor Assurance Maladie holds SOC 2 Type 1 certification.

Neither Services Australia nor Assurance Maladie holds SOC 2 Type 2 certification.

Neither Services Australia nor Assurance Maladie holds ISO 27001 certification.

Neither Services Australia nor Assurance Maladie holds PCI DSS certification.

Neither Services Australia nor Assurance Maladie holds HIPAA certification.

Neither Services Australia nor Assurance Maladie holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X