What is the official website of UHS ?

The official website of UHS is http://www.uhs.com.

What is UHS's cybersecurity risk score?

UHS has an AI-generated cybersecurity risk score of 691 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has UHS experienced?

According to Rankiteo, UHS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UHS been affected by any supply chain cyber incidents ?

According to Rankiteo, UHS has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UHS have SOC 2 Type 1 certification ?

According to Rankiteo, UHS is not certified under SOC 2 Type 1.

Does UHS have SOC 2 Type 2 certification ?

According to Rankiteo, UHS does not hold a SOC 2 Type 2 certification.

Does UHS comply with GDPR ?

According to Rankiteo, UHS is not listed as GDPR compliant.

Does UHS have PCI DSS certification ?

According to Rankiteo, UHS does not currently maintain PCI DSS compliance.

Does UHS comply with HIPAA ?

According to Rankiteo, UHS is not compliant with HIPAA regulations.

Does UHS have ISO 27001 certification ?

According to Rankiteo,UHS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UHS operate in ?

UHS operates primarily in the Hospitals and Health Care industry.

How many employees does UHS have ?

UHS employs approximately 11,001 people worldwide.

Does UHS own any subsidiaries ?

UHS presently has no subsidiaries across any sectors.

How many LinkedIn followers does UHS have ?

UHS's official LinkedIn profile has approximately 86,604 followers.

What is the NAICS classification code for UHS ?

UHS is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does UHS have a Crunchbase profile ?

Yes, UHS has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/universal-health-services.

Does UHS have a LinkedIn profile ?

Yes, UHS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uhs.

How many cybersecurity incidents has UHS experienced ?

As of July 9, 2026, Rankiteo reports that UHS has experienced 3 cybersecurity incidents.

How many peer or competitor companies does UHS have ?

UHS has an estimated 33,260 peer or competitor companies worldwide.

What types of cybersecurity incidents has UHS faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UHS

Boost Score +25 with badge (5 left)

691

/1000

Weak

716

/1000

Moderate

UHS Vendor Cyber Rating & Cyber Score

uhs.com

cb in

Add Your Compliance Badge

One of the nation’s largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (NYSE: UHS) has built an impressive record of achievement and performance, growing since its inception into a Fortune 300 corporation. Headquartered in King of Prussia, PA, UHS has 99,000 employees. Through its subsidiaries, UHS operates 29 acute care hospitals, 331 behavioral health facilities, 60 outpatient and other facilities in 39 U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com UHS is a registered trademark of UHS of Delaware, Inc., a subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company that operates through its subsidiaries. All

UHS A.I CyberSecurity Scoring

Scoring History

UHS

UHS CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UHS

Ransomware

100

10/2023

UHS8515124

UHS

Ransomware

100

10/2020

UHSCHAUNI177454...

UHS

Ransomware

100

9/2020

UHS194910422

Loading…

A.I.

UHS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UHS

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UHS in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UHS in 2026.

Incident Types UHS vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UHS in 2026.

Incident History - UHS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UHS Subsidiaries

Parent Company

UHS

Hospitals and Health Care

Website: http://www.uhs.com

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

UHS Similar Companies

Adventist Health

AdventistHealth.org

Adventist Health is a faith-inspired, nonprofit integrated health system serving more than 100 communities on the West Coast and Hawaii with over 440 sites of care. Founded on Adventist heritage and values, Adventist Health provides care in hospitals, clinics, home care agencies, hospice agencies, and joint-venture retirement centers in both rural and urban communities. Our compassionate and talented team of 38,000 includes employees, medical staff physicians, allied health professionals, and volunteers driven in pursuit of one mission; living God's love by inspiring health, wholeness and hope. We are committed to staying true to our heritage by providing patient-centered, quality care. Together, we are transforming the healthcare experience with an innovative whole-person focus on physical, mental, spiritual, and social healing to support community well-being.

Helios Health GmbH

helios-health.com

Based on our extensive expertise and know how we seek to ensure high quality, efficient and patient focused healthcare, locally as well as within an international environment. For this purpose Helios Health was founded in 2017. Helios Health combines Helios Germany (Helios Kliniken) and Helios Spain (Quirónsalud in Spain) and bundles cooporations with other Fresenius business segments such as Fresenius Vamed, Fresenius Kabi and Fresenius Medical Care. We are constantly looking for further growth opportunities and aim to facilitate know how exchange between healthcare providers and systems worldwide. We focus on acute care and near acute care activities in a structural framework that we can develop and advance based on our expertise and experience. In addition, we seek to provide cross-sectoral integrated patient care connecting in inpatient and outpatient care in the best suitable way for our patients. This promotes coordinated treatment and care pathways, reduced length of hospital stays and faster recovery of our patients. In line with our international growth strategy we are not interested in the acquisition of single / stand-alone hospitals but rather in the integration of hospital groups or medical center chains in order to create and develop healthcare platforms. We also cooperate with the other Fresenius business segments being active in healthcare in over 100 countries worldwide. We usually aim for a sole shareholder position or to acquire a controlling stake to assume full responsibility for the operating business.

HCA Healthcare

hcahealthcare.com

HCA Healthcare is dedicated to giving people a healthier tomorrow. As one of the nation’s leading providers of healthcare services, HCA Healthcare is comprised of 188 hospitals and 2,400+ sites of care in 20 states and the United Kingdom. In addition to hospitals, sites of care include surgery centers, freestanding ERs, urgent care centers, diagnostic and imaging centers, walk-in clinics and physician clinics. Many things set HCA Healthcare apart from other healthcare organizations; however, at our core, our greatest strength is our people. Every day, more than 290,000 colleagues go to work with a collective focus: our patients. Our focus positively impacts the care experience at the bedside and beyond. We are proud of the impact we have in our communities through employment, investment and charitable giving. HCA Healthcare is a learning health system that uses our approximately 37 million annual patient encounters to advance science, improve patient care and save lives. At HCA Healthcare, we are excited about the future of medicine. We believe we are uniquely positioned to play a leading role in the transformation of care. Note: Be alert for fraudulent job postings, emails, and phone calls. HCA Healthcare will never send you money or ask you to send money during the interview or hiring process.

Molina Healthcare

cb molinahealthcare.com

Molina Healthcare is a FORTUNE 500 company that is focused exclusively on government-sponsored health care programs for families and individuals who qualify for government sponsored health care. Molina Healthcare contracts with state governments and serves as a health plan providing a wide range of quality health care services to families and individuals. Molina Healthcare offers health plans in Arizona, California, Florida, Idaho, Illinois, Kentucky, Massachusetts, Michigan, Mississippi, Nevada, New Mexico, New York, Ohio, South Carolina, Texas, Utah, Virginia, Washington and Wisconsin. Molina also offers a Medicare product and has been selected in several states to participate in duals demonstration projects to manage the care for those eligible for both Medicaid and Medicare.

GE HealthCare

gehealthcare.com

Every day millions of people feel the impact of our intelligent devices, advanced analytics and artificial intelligence. As a leading global medical technology and digital solutions innovator, GE HealthCare enables clinicians to make faster, more informed decisions through intelligent devices, data analytics, applications and services, supported by its Edison intelligence platform. With over 100 years of healthcare industry experience and around 50,000 employees globally, the company operates at the center of an ecosystem working toward precision health, digitizing healthcare, helping drive productivity and improve outcomes for patients, providers, health systems and researchers around the world. We embrace a culture of respect, transparency, integrity and diversity and we work to create a world where healthcare has no limits.

Advocate Aurora Health

cb advocateaurorahealth.org

Advocate Aurora Health and Atrium Health are now Advocate Health – the fifth-largest nonprofit integrated health system in the U.S. Advocate Health is the fifth-largest nonprofit integrated health system in the United States –created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois, Atrium Health in the Carolinas, Georgia and Alabama, and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care, with Wake Forest University School of Medicine serving as the academic core of the enterprise. Headquartered in Charlotte, North Carolina, Advocate Health serves nearly 6 million patients and is engaged in hundreds of clinical trials and research studies. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 67 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social

Sentara Health

sentara.com

Sentara Health, an integrated, not-for-profit health care delivery system, celebrates more than 135 years in pursuit of its mission - "we improve health every day." Sentara is one of the largest health systems in the U.S. Mid-Atlantic and Southeast, and among the top 20 largest not-for-profit integrated health systems in the country, with 34,000 employees, 12 hospitals in Virginia and Northeastern North Carolina, including 10 hospitals with the prestigious Magnet®️ recognition, and the Sentara Health Plans division which serves more than 1 million members in Virginia and Florida. Sentara is recognized nationally for clinical quality and safety and is strategically focused on innovation and creating an extraordinary health care experience for our patients and members. Sentara was named a Health Quality Innovator of the Year (2024), was recognized by Forbes as "America’s Best-In-State Employer” (2024), "Best Employer for Veterans" (2022, 2023), and "Best Employer for Women" (2020), and named to IBM Watson Health's "Top 15 Health Systems" (2021, 2018). Like us on Facebook at www.facebook.com/sentarahealth Follow us on Instagram at @SentaraHealth

Ministério da Saúde

www.gov.br

O Ministério da Saúde é o órgão do Poder Executivo Federal responsável pela organização e elaboração de planos e políticas públicas voltados para a promoção, a prevenção e a assistência à saúde dos brasileiros. É função do Ministério dispor de condições para a proteção e recuperação da saúde da população, reduzindo as enfermidades, controlando as doenças endêmicas e parasitárias e melhorando a vigilância à saúde, dando, assim, mais qualidade de vida ao brasileiro. Missão “Promover a saúde da população mediante a integração e a construção de parcerias com os órgãos federais, as unidades da Federação, os municípios, a iniciativa privada e a sociedade, contribuindo para a melhoria da qualidade de vida e para o exercício da cidadania" Participação de Internautas: conheça as regras para mantermos boas discussões e debates por aqui: http://goo.gl/2fOH4H

AdventHealth

cb JoinAdventHealth.com

AdventHealth is a connected network of care that helps people feel whole – body, mind and spirit. More than 100,000 team members across a national footprint provide whole-person care to nearly nine million people annually through more than 2,000 care sites that include hospitals, physician practices, ambulatory surgery centers, outpatient clinics, home health agencies, hospice centers, the AdventHealth app and more. Our wholistic approach to improving the health and prosperity of our communities is inspired by our mission to extend the healing ministry of Christ.

Loading…

NEWS

UHS CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 16, 2025 08:00 AM

UHS hospitals will receive $1.5 million to expand telehealth services

Gov. Kathy Hochul announced $300 million in funding to strengthen health information technology, cybersecurity and telehealth services...

Read Article

July 31, 2024 07:00 AM

UHS employees recognized by Becker’s Hospital Review | United Health Services

Associate Chief Information Officer Kara Hines and Chief Revenue Cycle Officer Kenneth Hogue of UHS were recently named “Rising Stars: 42 healthcare leaders...

Read Article

March 13, 2024 07:00 AM

Change Healthcare cyberattack isn't threatening major for-profit systems' bottom lines, execs say

Senior leadership at major for-profit systems say they're shielded from the liquidity and administrative issues plaguing providers across...

Read Article

February 26, 2024 08:00 AM

Untitled Document

It is with great excitement that we announce the appointment of Sven Hahues as the new Chief Information Security Officer (CISO) for the...

Read Article

December 12, 2023 10:45 AM

UHS Discloses Cost of September Cyberattack: $67 Million in Pre-Tax Dollars

On Feb. 25, the 400-plus hospital, Pennsylvania-based Universal Health Services, Inc. disclosed in its fourth-quarter 2020 earnings report that the cyber...

Read Article

August 18, 2021 07:00 AM

Scripps Health Ransomware Attack Cost Increases to Almost $113 Million

Ransomware attacks on hospitals can cause huge financial losses, as the Ryuk ransomware attack on Universal Health Services showed.

Read Article

March 02, 2021 08:00 AM

UHS estimates Ryuk ransomware damage cost at $67M

UHS realized about $12 million in losses in Q3, followed by another $55 million in Q4. The majority of the losses was due to lost operating income in acute...

Read Article

March 01, 2021 08:00 AM

UHS Ransomware Attack Cost $67M in Lost Revenue, Recovery Efforts

The ransomware attack on UHS in September, not only caused three weeks of EHR downtime across 400 care sites. The cyberattack cost the...

Read Article

February 26, 2021 08:00 AM

Cyberattack cost UHS $67M in back half of 2020

Universal Health Services posted profits for the fourth quarter and full year of 2020 that were up year over year despite rising expenses...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59723

SUMMARY

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebSocket connections on the /browser endpoint without validating the Origin header, and when ROOM_SECRET is unset for local 127.0.0.1 binds, isAuthorizedBrowserRequest() allows attacker-controlled websites to send desktopCommand frames that read workspace state, mutate MCP and provider settings, and trigger command execution when a provider or model is configured. This issue is fixed in version 3.0.30.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.1

REFERENCES

CVE-2026-54784

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session establishment are used, allowing an observer to impersonate the authenticated Windows principal and decrypt or forge WS-SecureConversation traffic. This issue is fixed in version 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-54783

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security endorsing and supporting signature verification does not ensure the selected ds:Signature covers the expected Security header target, allowing an attacker with one captured signed SOAP envelope to replay arbitrary service operations as the victim principal. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-54782

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML 1.1 and SAML 2.0 token validation does not correctly resolve the issuer signing key or require signed tokens when IdentityConfiguration is used with federated bindings, allowing an unauthenticated remote attacker to impersonate any principal the trusted STS could issue. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Impact Score

5.8

Exploitability

3.9

REFERENCES

CVE-2026-54781

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token validation does not enforce SubjectConfirmation method URIs or holder-of-key proof keys in SamlSecurityTokenHandler, allowing holder-of-key downgrade or custom confirmation method assertions to authenticate a subject without proving authority over the assertion. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…