What is the official website of UHS ?

The official website of UHS is http://www.uhs.com.

What is UHS's cybersecurity risk score?

UHS has an AI-generated cybersecurity risk score of 691 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has UHS experienced?

According to Rankiteo, UHS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UHS been affected by any supply chain cyber incidents ?

According to Rankiteo, UHS has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UHS have SOC 2 Type 1 certification ?

According to Rankiteo, UHS is not certified under SOC 2 Type 1.

Does UHS have SOC 2 Type 2 certification ?

According to Rankiteo, UHS does not hold a SOC 2 Type 2 certification.

Does UHS comply with GDPR ?

According to Rankiteo, UHS is not listed as GDPR compliant.

Does UHS have PCI DSS certification ?

According to Rankiteo, UHS does not currently maintain PCI DSS compliance.

Does UHS comply with HIPAA ?

According to Rankiteo, UHS is not compliant with HIPAA regulations.

Does UHS have ISO 27001 certification ?

According to Rankiteo,UHS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UHS operate in ?

UHS operates primarily in the Hospitals and Health Care industry.

How many employees does UHS have ?

UHS employs approximately 11,001 people worldwide.

Does UHS own any subsidiaries ?

UHS presently has no subsidiaries across any sectors.

How many LinkedIn followers does UHS have ?

UHS's official LinkedIn profile has approximately 86,604 followers.

What is the NAICS classification code for UHS ?

UHS is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does UHS have a Crunchbase profile ?

Yes, UHS has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/universal-health-services.

Does UHS have a LinkedIn profile ?

Yes, UHS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uhs.

How many cybersecurity incidents has UHS experienced ?

As of July 12, 2026, Rankiteo reports that UHS has experienced 3 cybersecurity incidents.

How many peer or competitor companies does UHS have ?

UHS has an estimated 33,263 peer or competitor companies worldwide.

What types of cybersecurity incidents has UHS faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UHS

Boost Score +25 with badge (5 left)

691

/1000

Weak

716

/1000

Moderate

UHS Vendor Cyber Rating & Cyber Score

uhs.com

cb in

Add Your Compliance Badge

One of the nation’s largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (NYSE: UHS) has built an impressive record of achievement and performance, growing since its inception into a Fortune 300 corporation. Headquartered in King of Prussia, PA, UHS has 99,000 employees. Through its subsidiaries, UHS operates 29 acute care hospitals, 331 behavioral health facilities, 60 outpatient and other facilities in 39 U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com UHS is a registered trademark of UHS of Delaware, Inc., a subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company that operates through its subsidiaries. All

UHS A.I CyberSecurity Scoring

Scoring History

UHS

UHS CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UHS

Ransomware

100

10/2023

UHS8515124

UHS

Ransomware

100

10/2020

UHSCHAUNI177454...

UHS

Ransomware

100

9/2020

UHS194910422

Loading…

A.I.

UHS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UHS

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UHS in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UHS in 2026.

Incident Types UHS vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UHS in 2026.

Incident History - UHS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UHS Subsidiaries

Parent Company

UHS

Hospitals and Health Care

Website: http://www.uhs.com

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

UHS Similar Companies

Sentara Health

sentara.com

Sentara Health, an integrated, not-for-profit health care delivery system, celebrates more than 135 years in pursuit of its mission - "we improve health every day." Sentara is one of the largest health systems in the U.S. Mid-Atlantic and Southeast, and among the top 20 largest not-for-profit integrated health systems in the country, with 34,000 employees, 12 hospitals in Virginia and Northeastern North Carolina, including 10 hospitals with the prestigious Magnet®️ recognition, and the Sentara Health Plans division which serves more than 1 million members in Virginia and Florida. Sentara is recognized nationally for clinical quality and safety and is strategically focused on innovation and creating an extraordinary health care experience for our patients and members. Sentara was named a Health Quality Innovator of the Year (2024), was recognized by Forbes as "America’s Best-In-State Employer” (2024), "Best Employer for Veterans" (2022, 2023), and "Best Employer for Women" (2020), and named to IBM Watson Health's "Top 15 Health Systems" (2021, 2018). Like us on Facebook at www.facebook.com/sentarahealth Follow us on Instagram at @SentaraHealth

Cleveland Clinic

cb clevelandclinic.org

Cleveland Clinic, located in Cleveland, Ohio, is a not-for-profit, multispecialty academic medical center that integrates clinical and hospital care with research and education. Founded in 1921 by four renowned physicians with a vision of providing outstanding patient care based upon the principles of cooperation, compassion and innovation, Cleveland Clinic has become one of the largest and most respected hospitals in the country. Cleveland Clinic facilities can be found throughout Northeast Ohio, as well as around the country and world including: Cleveland Clinic Abu Dhabi Cleveland Clinic Canada Cleveland Clinic Florida Cleveland Clinic London Cleveland Clinic Lou Ruvo Center for Brain Health - Las Vegas

Jefferson Health

JeffersonHealth.org

Thomas Jefferson University and Thomas Jefferson University Hospitals are partners in providing excellent clinical and compassionate care for our patients in the Philadelphia region, educating the health professionals of tomorrow in a variety of disciplines and discovering new knowledge that will define the future of clinical care. Thomas Jefferson University is dedicated to health sciences education and research.

Ministério da Saúde

www.gov.br

O Ministério da Saúde é o órgão do Poder Executivo Federal responsável pela organização e elaboração de planos e políticas públicas voltados para a promoção, a prevenção e a assistência à saúde dos brasileiros. É função do Ministério dispor de condições para a proteção e recuperação da saúde da população, reduzindo as enfermidades, controlando as doenças endêmicas e parasitárias e melhorando a vigilância à saúde, dando, assim, mais qualidade de vida ao brasileiro. Missão “Promover a saúde da população mediante a integração e a construção de parcerias com os órgãos federais, as unidades da Federação, os municípios, a iniciativa privada e a sociedade, contribuindo para a melhoria da qualidade de vida e para o exercício da cidadania" Participação de Internautas: conheça as regras para mantermos boas discussões e debates por aqui: http://goo.gl/2fOH4H

Mercy

cb mercy.net

Mercy, one of the 15 largest U.S. health systems and named the top large system in the U.S. for excellent patient experience by NRC Health, serves millions annually with nationally recognized care and one of the nation’s largest and highest performing Accountable Care Organizations in quality and cost. Mercy is a highly integrated, multi-state health care system including 55 acute care and specialty (heart, children’s, orthopedic and rehab) hospitals, convenient and urgent care locations, imaging centers and pharmacies. Mercy has over 1,000 physician practice locations and outpatient facilities, more than 5,000 physicians and advanced practitioners and more than 50,000 caregivers serving patients and families across Arkansas, Illinois, Kansas, Missouri and Oklahoma. Mercy also has clinics, outpatient services and outreach ministries in Arkansas, Louisiana, Mississippi and Texas. In fiscal year 2025 alone, Mercy provided more than half a billion dollars of free care and other community benefits, including traditional charity care and unreimbursed Medicaid.

Endeavor Health

cb endeavorhealth.org

NorthShore University HealthSystem, Swedish Hospital, Northwest Community Healthcare and Edward-Elmhurst Health are now united under one name: Endeavor Health. Together, we’re driven by our mission to help everyone in our communities be their best and our commitment to setting a new standard for healthcare by delivering a truly personal patient experience combined with convenient access to pioneering, world-class care. We are proud to be Illinois’ third-largest health system with more than 27,000 team members, nine award-winning hospitals and more than 300 clinic locations based in the communities we call home.

RWJBarnabas Health

rwjbh.org

RWJBarnabas Health is New Jersey’s largest and most comprehensive academic health system, caring for more than 5 million people annually. Nationally renowned for quality and safety, the system includes 14 hospitals and 9,000 affiliated physicians integrated to provide care at more than 700 patient care locations. RWJBarnabas Health is among New Jersey’s largest private employers, with more than 44,000 employees, contributing more than $5.5 billion to the state economy every year. RWJBarnabas Health partners with its diverse communities to build and sustain a healthier New Jersey. It provides patient-centered care in a compassionate and equitable manner. RWJBarnabas Health’s commitment to enhancing access to care includes a transformative partnership with Rutgers University, including the Rutgers Cancer Institute — the state's only NCI-designated Comprehensive Cancer Center - and Rutgers Robert Wood Johnson Medical School.

UCHealth

cb uchealth.org

At UCHealth, we do things differently. We strive to promote individual and community health and leave no question unanswered along the way. We’re driven to improve and optimize health care. Our network of nationally-recognized hospitals, clinic locations and health care providers extends throughout Colorado, southern Wyoming and western Nebraska. We deliver excellent care close to home, no matter where you might live. Our success is defined by more than our patient volumes or treatment outcomes. It’s about building a team of exceptional people, from our clinical staff to our expert physicians, who consistently do what is right for the individuals we are honored to serve. UCHealth, a 501(c) (3) health system, was formed in 2012 to increase access to innovative and advanced patient care, realize supply chain and IT efficiencies, and to better serve patients throughout the Rocky Mountain region by combining academic-based and community-focused medicine. Together, the clinics and hospitals within UCHealth can offer the most advanced treatments to improve the lives of patients and their families in Colorado and beyond.

Rush University Medical Center

rush.edu

Rush University Medical Center is an academic medical center that includes a 671-bed hospital serving adults and children, the 61-bed Johnston R. Bowman Health Center and Rush University. Rush University is home to one of the first medical colleges in the Midwest and one of the nation's top-ranked nursing colleges, as well as graduate programs in allied health, health systems management and biomedical research. The medical center also offers more than 70 highly selective residency and fellowship programs in medical and surgical specialties and subspecialties. For more than 170 years, Rush has been leading the way in developing innovative and often life-saving treatments. Today, Rush is a thriving center for basic and clinical research, with physicians and scientists involved in hundreds of research projects developing and testing the effectiveness and safety of new therapies and medical devices. In addition to its mission in patient care, education and research, Rush maintains a strong commitment to the community. Rush reaches out to the Chicago community through such offerings as the Rush Community Services Initiatives Program, an umbrella for several student-led outreach programs designed to address the social and health care needs of residents in neighboring communities.

Loading…

NEWS

UHS CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 16, 2025 08:00 AM

UHS hospitals will receive $1.5 million to expand telehealth services

Gov. Kathy Hochul announced $300 million in funding to strengthen health information technology, cybersecurity and telehealth services...

Read Article

July 31, 2024 07:00 AM

UHS employees recognized by Becker’s Hospital Review | United Health Services

Associate Chief Information Officer Kara Hines and Chief Revenue Cycle Officer Kenneth Hogue of UHS were recently named “Rising Stars: 42 healthcare leaders...

Read Article

March 13, 2024 07:00 AM

Change Healthcare cyberattack isn't threatening major for-profit systems' bottom lines, execs say

Senior leadership at major for-profit systems say they're shielded from the liquidity and administrative issues plaguing providers across...

Read Article

February 26, 2024 08:00 AM

Untitled Document

It is with great excitement that we announce the appointment of Sven Hahues as the new Chief Information Security Officer (CISO) for the...

Read Article

December 12, 2023 10:45 AM

UHS Discloses Cost of September Cyberattack: $67 Million in Pre-Tax Dollars

On Feb. 25, the 400-plus hospital, Pennsylvania-based Universal Health Services, Inc. disclosed in its fourth-quarter 2020 earnings report that the cyber...

Read Article

August 18, 2021 07:00 AM

Scripps Health Ransomware Attack Cost Increases to Almost $113 Million

Ransomware attacks on hospitals can cause huge financial losses, as the Ryuk ransomware attack on Universal Health Services showed.

Read Article

March 02, 2021 08:00 AM

UHS estimates Ryuk ransomware damage cost at $67M

UHS realized about $12 million in losses in Q3, followed by another $55 million in Q4. The majority of the losses was due to lost operating income in acute...

Read Article

March 01, 2021 08:00 AM

UHS Ransomware Attack Cost $67M in Lost Revenue, Recovery Efforts

The ransomware attack on UHS in September, not only caused three weeks of EHR downtime across 400 care sites. The cyberattack cost the...

Read Article

February 26, 2021 08:00 AM

Cyberattack cost UHS $67M in back half of 2020

Universal Health Services posted profits for the fourth quarter and full year of 2020 that were up year over year despite rising expenses...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58281

SUMMARY

Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 8.3)

cvss3

Base Score: 8.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Impact Score

Exploitability

1.6

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58281

CVE-2026-10660

SUMMARY

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single file-static net_buf_simple (att_buf, BT_ATT_MAX_ATTRIBUTE_LEN = 512 bytes) shared by all connection instances, while the BUSY flag, long-read handle, and reset/offset state were per-connection. When the device acts as a Broadcast Assistant connected to multiple Scan Delegator peripherals, notification and long-read callbacks from different connections interleave on the shared buffer: the append in notify_handler (net_buf_simple_add_mem at the not-busy branch) performs no tailroom check, so receive-state notifications from two or more delegators accumulate on the same 512-byte buffer and, with a sufficiently large configured ATT MTU (BT_L2CAP_TX_MTU up to 2000) and two-to-three concurrent connections, write past the buffer into adjacent .bss (net_buf_simple_add only asserts in debug builds). Even below the overflow threshold, one connection's net_buf_simple_reset zeroes the shared length while another connection's reassembly and GATT read offset are in flight, mixing one peer's data into another's parse. A malicious or compromised Scan Delegator (or two colluding peers) over BLE can trigger this, causing out-of-bounds writes (memory corruption / denial of service) and cross-connection data corruption. The fix moves the buffer into the per-connection instance struct so each connection reassembles into its own buffer. Affects Zephyr releases shipping the Broadcast Assistant with the shared buffer, including v4.4.0 and earlier.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 6.4)

cvss3

Base Score: 6.4

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

1.6

REFERENCES

CVE-2026-61870

SUMMARY

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 2.9)

cvss3

Base Score: 2.9

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.1

Complexity: HIGH

CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.4

REFERENCES

CVE-2026-61861

SUMMARY

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-61858

SUMMARY

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…