What is the official website of UCSF Health ?

The official website of UCSF Health is http://www.ucsfhealth.org.

What is UCSF Health's cybersecurity risk score?

UCSF Health has an AI-generated cybersecurity risk score of 725 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has UCSF Health experienced?

According to Rankiteo, UCSF Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UCSF Health been affected by any supply chain cyber incidents ?

According to Rankiteo, UCSF Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UCSF Health have SOC 2 Type 1 certification ?

According to Rankiteo, UCSF Health is not certified under SOC 2 Type 1.

Does UCSF Health have SOC 2 Type 2 certification ?

According to Rankiteo, UCSF Health does not hold a SOC 2 Type 2 certification.

Does UCSF Health comply with GDPR ?

According to Rankiteo, UCSF Health is not listed as GDPR compliant.

Does UCSF Health have PCI DSS certification ?

According to Rankiteo, UCSF Health does not currently maintain PCI DSS compliance.

Does UCSF Health comply with HIPAA ?

According to Rankiteo, UCSF Health is not compliant with HIPAA regulations.

Does UCSF Health have ISO 27001 certification ?

According to Rankiteo,UCSF Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UCSF Health operate in ?

UCSF Health operates primarily in the Hospitals and Health Care industry.

How many employees does UCSF Health have ?

UCSF Health employs approximately 11,303 people worldwide.

Does UCSF Health own any subsidiaries ?

UCSF Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does UCSF Health have ?

UCSF Health's official LinkedIn profile has approximately 115,691 followers.

What is the NAICS classification code for UCSF Health ?

UCSF Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does UCSF Health have a Crunchbase profile ?

No, UCSF Health does not have a profile on Crunchbase.

Does UCSF Health have a LinkedIn profile ?

Yes, UCSF Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ucsfhealth.

How many cybersecurity incidents has UCSF Health experienced ?

As of August 28, 2026, Rankiteo reports that UCSF Health has experienced 3 cybersecurity incidents.

How many peer or competitor companies does UCSF Health have ?

UCSF Health has an estimated 33,748 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCSF Health

Boost Score +25 with badge (5 left)

725

/1000

Moderate

750

/1000

Fair

UCSF Health Vendor Cyber Rating & Cyber Score

ucsfhealth.org

Add Your Compliance Badge

UCSF Health is an integrated health care network encompassing several entities, including UCSF Medical Center, one of the nation’s top 10 hospitals according to U.S. News & World Report, and UCSF Benioff Children’s Hospitals, with campuses in Oakland and San Francisco. We are recognized throughout the world for our innovative patient care, advanced technology and pioneering research. For more than a century, we have offered the highest quality medical treatment. Today, our expertise covers virtually all specialties, from cancer to women's health. In addition, the compassionate care provided by our doctors, nurses and other staff is a key to our success. Our services generate about 1.1 million patient visits to our clinics a year and

UCSF Health A.I CyberSecurity Scoring

Scoring History

UCSF Health

UCSF Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UCSF Health

Breach

2/2023

UCS157082025

UCSF Health

Ransomware

100

6/2020

UCS658072625

UCSF Health

Breach

9/2013

UCS212072625

Loading…

A.I.

UCSF Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCSF Health

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UCSF Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UCSF Health in 2026.

Incident Types UCSF Health vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UCSF Health in 2026.

Incident History - UCSF Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UCSF Health Subsidiaries

Parent Company

UCSF Health

Hospitals and Health Care

Website: http://www.ucsfhealth.org

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

UCSF Health Similar Companies

WVU Medicine

wvumedicine.org

The West Virginia University Health System, which operates under the brand WVU Medicine, is West Virginia’s largest health system and the state’s largest employer with more than 3,400 licensed beds, 4,600 providers, 35,000 employees, and $7 billion in total operating revenues. The Health System is comprised of 25 hospitals – including J.W. Ruby Memorial Hospital, an 880-bed academic medical center, and the 150-bed WVU Medicine Golisano Children’s Hospital in Morgantown, West Virginia – and five institutes. To learn more, visit WVUMedicine.org.

UCLA Health

cb uclahealth.org

For more than half a century, UCLA Health has provided the best in healthcare and the latest in medical technology to the people of Los Angeles and throughout the world. Comprised of Ronald Reagan UCLA Medical Center, UCLA Medical Center Santa Monica, Resnick Neuropsychiatric Hospital at UCLA, UCLA Mattel Children's Hospital, UCLA West Valley Medical Center and the UCLA Medical Group with its wide-reaching system of primary-care and specialty-care offices throughout the region, UCLA Health is among the most comprehensive and advanced healthcare systems in the world. Our physicians are world leaders in the diagnosis and treatment of complex illnesses, and our hospitals are among the best in the country. Consistently ranked one of the top ten hospitals in the nation and the best medical center in the western United States by U.S. News & World Report, Ronald Reagan UCLA Medical Center is at the cutting edge of biomedical research, and our doctors and scientists are leaders in performing pioneering work across an astounding range of disciplines, from organ transplantation and cardiac surgery to neurosurgery and cancer treatment, and bringing the latest discoveries to virtually every field of medicine.

Massachusetts General Hospital

cb massgeneral.org

Guided by the needs of our patients and their families, Massachusetts General Hospital aims to deliver the very best health care in a safe, compassionate environment; to advance that care through innovative research and education; and, to improve the health and well-being of the diverse communities we serve. Visit our careers page! http://www.mghcareers.org

Medical University of South Carolina

musc.edu

The Medical University of South Carolina (MUSC) is a public institution of higher learning the purpose of which is to preserve and optimize human life in South Carolina and beyond. The university provides an interprofessional environment for learning and discovery through education of health care professionals and biomedical scientists, research in the health sciences and provision of comprehensive health care.

Labcorp

labcorp.com

Clear and confident health care decisions begin with questions. At Labcorp, we’re constantly in pursuit of answers. As a global leader of innovative and comprehensive laboratory services, we help doctors, hospitals, pharmaceutical companies, researchers and patients make clear and confident decisions. We provide insights and advance science to improve health and improve lives through our unparalleled diagnostics and drug development laboratory capabilities. Our more than 60,000 employees serve clients in over 100 countries, worked on over 80% of the new drugs approved by the FDA in 2022 and performed more than 600 million tests for patients around the world. Learn more about Labcorp (NYSE: LH) at www.labcorp.com.

GeBBS Healthcare Solutions

gebbs.com

GeBBS Healthcare Solutions is a KLAS rated leading provider of Revenue Cycle Management (RCM) services and Risk Adjustment solutions. GeBBS’ innovative technology, combined with over 14,000-strong global workforce, helps clients improve financial performance, adhere to compliance, and enhance the patient experience. Headquartered in East Haven, CT, GeBBS is backed by EQT, one of the premier private equity funds in Europe. GeBBS has won numerous accolades for its medical coding outsourcing and medical billing outsourcing, including being ranked in Modern Healthcare’s Top 10 Largest RCM Firms, Black Book Market Research’s Top 20 RCM Outsourcing Services, and Inc. 5000’s fastest growing private companies in the U.S. For more information, please visit www.gebbs.com.

Endeavor Health

cb endeavorhealth.org

NorthShore University HealthSystem, Swedish Hospital, Northwest Community Healthcare and Edward-Elmhurst Health are now united under one name: Endeavor Health. Together, we’re driven by our mission to help everyone in our communities be their best and our commitment to setting a new standard for healthcare by delivering a truly personal patient experience combined with convenient access to pioneering, world-class care. We are proud to be Illinois’ third-largest health system with more than 27,000 team members, nine award-winning hospitals and more than 300 clinic locations based in the communities we call home.

IHH Healthcare

ihhhealthcare.com

A world-leading multinational healthcare provider, IHH believes that making a difference starts with our aspiration to Care. For Good. Our team of 70,000 people commit to deliver greater good to our patients, people, the public and our planet, as we live our purpose each day to touch lives and transform care. Through our portfolio of trusted brands – Acibadem, Fortis, Gleneagles, Island, Mount Elizabeth, Pantai, Parkway and Prince Court, – we offer our patients comprehensive and personalised care ranging from primary to quaternary, and even ancillary services such as laboratory, diagnostics, imaging and rehabilitation. With our scale and reach in 10 countries, we continue to raise the bar in healthcare in our key markets of Malaysia, Singapore, Türkiye, India, Greater China (including Hong Kong) and beyond. In partnership with our stakeholders, we will co-create a sustainable future for all as we work towards our vision to become the world’s most trusted healthcare services network.

Jefferson Health

JeffersonHealth.org

Thomas Jefferson University and Thomas Jefferson University Hospitals are partners in providing excellent clinical and compassionate care for our patients in the Philadelphia region, educating the health professionals of tomorrow in a variety of disciplines and discovering new knowledge that will define the future of clinical care. Thomas Jefferson University is dedicated to health sciences education and research.

Loading…

NEWS

UCSF Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 19, 2026 07:00 AM

A man in his 20s lived 119 days on an artificial heart before transplant

Picard Medical (NYSE American: PMI) highlighted a UCSF Health case in which a patient in his twenties was supported on the SynCardia Total...

Read Article

February 26, 2026 08:00 AM

GEHC, UCSF Health ink 10-year imaging collaboration

GEHC and UCSF Health are entering a 10-year collaboration, focusing on remote scanning, technologist education, and MR protocols.

Read Article

February 12, 2026 08:00 AM

Picard Medical/ SynCardia Highlights Successful Bridge-to-Transplant Case at UCSF Health Using the SynCardia Total Artificial Heart

Successful heart transplant case following an implanted SynCardia total artificial heart reported at hospital with one of the largest heart...

Read Article

February 12, 2026 08:00 AM

Artificial heart supports 37-year-old until transplant at top-ranked UCSF

UCSF's first heart transplant after a SynCardia total artificial heart marks a key milestone for advanced heart failure care as Picard...

Read Article

December 10, 2025 08:00 AM

Providers urge HHS to scrap proposed HIPAA Security Rule updates

Over 100 provider organizations signed a letter urging HHS to rescind its proposed updates to the HIPAA Security Rule and instead work with...

Read Article

November 18, 2025 08:00 AM

Outdated systems, shadow AI threaten healthcare cybersecurity

Outdated technology, shadow AI and inefficient IT systems are fueling healthcare cybersecurity challenges, clinician burnout and patient...

Read Article

October 17, 2025 07:00 AM

UCSF Health to strengthen two community hospitals in San Francisco, US

University of California San Francisco (UCSF) Health is set to strengthen two community hospitals in San Francisco, US, as part of a $430m,...

Read Article

October 15, 2025 07:00 AM

Inspiring Tomorrow’s Leaders: UCSF Medical Students Mentor High Schoolers Through Summer Camps

Each summer, UCSF medical students lead immersive health science camps for local high schoolers—part of the School of Medicine's commitment...

Read Article

October 15, 2025 07:00 AM

UCSF is renaming the two community hospitals it acquired last year

UCSF Health is renaming St. Mary's Medical Center and Saint Francis Memorial Hospital, which it bought last year for a collective $100...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…