What is the official website of UNC Health ?

The official website of UNC Health is https://www.unchealth.org/.

What is UNC Health's cybersecurity risk score?

UNC Health has an AI-generated cybersecurity risk score of 779 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has UNC Health experienced?

According to Rankiteo, UNC Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UNC Health been affected by any supply chain cyber incidents ?

According to Rankiteo, UNC Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UNC Health have SOC 2 Type 1 certification ?

According to Rankiteo, UNC Health is not certified under SOC 2 Type 1.

Does UNC Health have SOC 2 Type 2 certification ?

According to Rankiteo, UNC Health does not hold a SOC 2 Type 2 certification.

Does UNC Health comply with GDPR ?

According to Rankiteo, UNC Health is not listed as GDPR compliant.

Does UNC Health have PCI DSS certification ?

According to Rankiteo, UNC Health does not currently maintain PCI DSS compliance.

Does UNC Health comply with HIPAA ?

According to Rankiteo, UNC Health is not compliant with HIPAA regulations.

Does UNC Health have ISO 27001 certification ?

According to Rankiteo,UNC Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UNC Health operate in ?

UNC Health operates primarily in the Hospitals and Health Care industry.

How many employees does UNC Health have ?

UNC Health employs approximately 19,676 people worldwide.

Does UNC Health own any subsidiaries ?

UNC Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does UNC Health have ?

UNC Health's official LinkedIn profile has approximately 115,191 followers.

What is the NAICS classification code for UNC Health ?

UNC Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does UNC Health have a Crunchbase profile ?

No, UNC Health does not have a profile on Crunchbase.

Does UNC Health have a LinkedIn profile ?

Yes, UNC Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/unchealth.

How many cybersecurity incidents has UNC Health experienced ?

As of July 12, 2026, Rankiteo reports that UNC Health has experienced 1 cybersecurity incidents.

How many peer or competitor companies does UNC Health have ?

UNC Health has an estimated 33,262 peer or competitor companies worldwide.

What types of cybersecurity incidents has UNC Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UNC Health

Boost Score +25 with badge (5 left)

779

/1000

Fair

804

/1000

Good

UNC Health Vendor Cyber Rating & Cyber Score

unchealth.org

Add Your Compliance Badge

Our mission is to improve the health and well-being of North Carolinians and others whom we serve. We accomplish this by providing leadership and excellence in the interrelated areas of patient care, education and research. UNC Health and its 40,000 teammates, continue to serve as North Carolina’s Health Care System, caring for patients from all 100 counties and beyond our borders. We continue to leverage the world class research conducted in the UNC School of Medicine, translating that innovation to life-saving and life-changing therapies, procedures, and techniques for the patients who rely on us. General terms of service for UNC Health social media: https://www.facebook.com/unchealthcare/about_details

UNC Health A.I CyberSecurity Scoring

Scoring History

UNC Health

UNC Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UNC Health

Breach

03/2017

UNC93815722

Loading…

A.I.

UNC Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UNC Health

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UNC Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UNC Health in 2026.

Incident Types UNC Health vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UNC Health in 2026.

Incident History - UNC Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UNC Health Subsidiaries

UNC Health

Hospitals and Health Care

Website: https://www.unchealth.org/

Company Size: 10,000+ employees

UNC Health RexHospitals and Health Care

Caldwell Memorial HospitalHospitals and Health Care

UNC Health PardeeHospitals and Health Care

High Point Regional HealthHospitals and Health Care

Loading…

UNC Health Similar Companies

Alberta Health Services

cb albertahealthservices.ca

Alberta Health Services (AHS) is proud to be part of Canada’s first and largest provincewide, integrated health system, responsible for delivering health services to more than 4.5 million people living in Alberta, as well as occasionally to some residents of other provinces and territories Our skilled and dedicated professionals, support staff and physicians come from numerous disciplines, from all walks of life, and from all corners of the world. Our mission is to provide a patient-focused, quality health system that is accessible and sustainable for all Albertans. Our five values – compassion, accountability, respect, excellence and safety – are at the heart of everything that we do.

Brookdale

cb brookdale.com

Relationships are the heart of our culture. They help us create a sense of family among our residents, associates and patients. Integrity is our soul. It guides us to be open in our communication with each other, and it enables us to make the right decisions for the people who have entrusted us with their care. Our relationships and our integrity work together to create a positive impact in the lives of the people we touch. The happiness of those we serve is dependent on the happiness of our associates, so you’ll receive competitive compensation and a benefits package with additional perks designed to make you smile. The work you do will be challenging yet rewarding. But you’ll earn more than a paycheck; you can enjoy opportunities to grow your career, as well as ongoing programs catered to your health, financial, mental, and emotional needs. Most of all, we believe you can find purpose, meaning, and the chance to be a part of something bigger than yourself. If you want to work in an environment where you can become the best you that’s possible, join us! www.brookdalecareers.com.

Kindred

kindredhospitals.com

Kindred’s mission is to help our patients reach their highest potential for health and healing with intensive medical and rehabilitative care through a compassionate patient experience. Kindred’s 61 long-term acute care hospitals (LTACHs), along with 18 community-based, short-term acute care hospital campuses from across the nation, became part of ScionHealth with its launch in December 2021. Cornerstone Healthcare Group joined the ScionHealth family of hospitals and hospital services in January 2023. In December 2021, Kindred Healthcare became a part of LifePoint Health, a leading healthcare company. As part of this transaction, LifePoint and Kindred also launched a new company, ScionHealth. Today, Kindred’s facilities are now part of either LifePoint or ScionHealth. Specifically, Kindred’s 61 long-term acute care hospitals – along with 18 community-based, short-term acute care hospital campuses from LifePoint – are now a part of ScionHealth.

Indiana University Health

cb iuhealth.org

Indiana University Health is Indiana’s largest and most comprehensive system. A unique partnership with the Indiana University School of Medicine—one of the nation’s largest medical schools—gives patients access to groundbreaking research and innovative treatments, and it offers team members access to the latest science and the very best training—advancing healthcare for all. At IU Health, your personal and professional growth is a top priority. You will have access to many diverse opportunities to learn and develop in meaningful ways that matter most to you, such as advanced clinical training, leadership development, promotion opportunities and cross-training development.

Prisma Health

cb prismahealth.org

Prisma Health is the largest not-for-profit health organization in South Carolina, serving more than 1.2 million patients annually. Our facilities in the Greenville and Columbia surrounding markets are dedicated to improving the health of all South Carolinians through improved clinical quality, access to care and patient experience, while also addressing the rising cost of health care. Our Purpose: Inspire health. Serve with compassion. Be the difference.

University Hospitals Connor Integrative Health Network

uhhospitals.org

Integrative Medicine (IM) is an approach to healthcare that takes into account the whole person addressing the full range of physical, emotional, mental, social, spiritual, and environmental influences that affect an individual’s health. IM is informed by evidence, makes use of all appropriate therapies, and emphasizes that the patient and practitioner are partners in the healing process. At University Hospitals Connor Whole Health, we offer IM therapies that work in concert with traditional medical treatments to heal the mind, body, and spirit. Employing a personalized strategy that considers the patient’s unique circumstances, we use the most appropriate interventions from an array of scientific disciplines to heal illness and disease and help people attain optimum health.

Elevance Health

elevancehealth.com

Fueled by our bold purpose to improve the health of humanity, we are transforming from a traditional health benefits organization into a lifetime trusted health partner.   Our nearly 100,000 associates serve more than 118 million people, at every stage of health. We address a full range of needs with an integrated whole health approach, powered by industry-leading capabilities and a digital platform for health.  We believe that improving health for everyone is possible. It begins by redefining health, reimagining the health system, and strengthening our communities.

Massachusetts General Hospital

cb massgeneral.org

Guided by the needs of our patients and their families, Massachusetts General Hospital aims to deliver the very best health care in a safe, compassionate environment; to advance that care through innovative research and education; and, to improve the health and well-being of the diverse communities we serve. Visit our careers page! http://www.mghcareers.org

Mercy

cb mercy.net

Mercy, one of the 15 largest U.S. health systems and named the top large system in the U.S. for excellent patient experience by NRC Health, serves millions annually with nationally recognized care and one of the nation’s largest and highest performing Accountable Care Organizations in quality and cost. Mercy is a highly integrated, multi-state health care system including 55 acute care and specialty (heart, children’s, orthopedic and rehab) hospitals, convenient and urgent care locations, imaging centers and pharmacies. Mercy has over 1,000 physician practice locations and outpatient facilities, more than 5,000 physicians and advanced practitioners and more than 50,000 caregivers serving patients and families across Arkansas, Illinois, Kansas, Missouri and Oklahoma. Mercy also has clinics, outpatient services and outreach ministries in Arkansas, Louisiana, Mississippi and Texas. In fiscal year 2025 alone, Mercy provided more than half a billion dollars of free care and other community benefits, including traditional charity care and unreimbursed Medicaid.

Loading…

NEWS

UNC Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 25, 2026 03:23 PM

Durham hires technology director to lead digital services

Durham, North Carolina appoints Richard Barbee as Technology Solutions director to lead IT infrastructure, cybersecurity and digital...

Read Article

March 23, 2026 10:48 PM

Durham, N.C., Finds Its New Technology Director in Academia

With more than a decade of experience managing enterprise infrastructure, cybersecurity initiatives and large-scale technology projects,...

Read Article

March 21, 2026 03:00 PM

Hicks helps lead UNCP’s first cybersecurity graduates

PEMBROKE — When Phillip Hicks arrived at UNC Pembroke as a freshman, the university's cybersecurity program was still in its trial phase.

Read Article

March 09, 2026 07:00 AM

New UNC Health Pardee office in Brevard opens to patients

A new UNC Health Pardee medical office building, constructed in just over a year, welcomed patients March 9.

Read Article

February 19, 2026 08:00 AM

UMMC computer systems down after cyberattack

The University of Mississippi Medical Center closed all its statewide clinics and canceled many appointments Thursday and Friday after a...

Read Article

February 17, 2026 08:00 AM

UNC Health to install Mevion’s proton therapy system

UNC Health is deploying Mevion Medical System's S250-FIT Proton Therapy System to expand access to proton technology in cancer treatment.

Read Article

February 09, 2026 08:00 AM

Signature Performance $8.5M Data Breach Settlement

Individuals who received a notification from Signature Performance Inc., Adventist Health Tulare and Adventist Health System/West,...

Read Article

January 23, 2026 08:00 AM

UNC Charlotte launches National Defense and Intelligence Innovation Institute

UNC Charlotte's new NDI3 institute integrates AI, cybersecurity and health research to accelerate mission-ready solutions for national...

Read Article

December 15, 2025 08:00 AM

UNCG Spartan Cyber Guardian Academy Supports Students, Community

UNC Greensboro's Spartan Cyber Guardian Academy offers free cybersecurity training and services to nonprofits, funded by a $1M Google grant.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58281

SUMMARY

Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 8.3)

cvss3

Base Score: 8.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Impact Score

Exploitability

1.6

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58281

CVE-2026-10660

SUMMARY

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single file-static net_buf_simple (att_buf, BT_ATT_MAX_ATTRIBUTE_LEN = 512 bytes) shared by all connection instances, while the BUSY flag, long-read handle, and reset/offset state were per-connection. When the device acts as a Broadcast Assistant connected to multiple Scan Delegator peripherals, notification and long-read callbacks from different connections interleave on the shared buffer: the append in notify_handler (net_buf_simple_add_mem at the not-busy branch) performs no tailroom check, so receive-state notifications from two or more delegators accumulate on the same 512-byte buffer and, with a sufficiently large configured ATT MTU (BT_L2CAP_TX_MTU up to 2000) and two-to-three concurrent connections, write past the buffer into adjacent .bss (net_buf_simple_add only asserts in debug builds). Even below the overflow threshold, one connection's net_buf_simple_reset zeroes the shared length while another connection's reassembly and GATT read offset are in flight, mixing one peer's data into another's parse. A malicious or compromised Scan Delegator (or two colluding peers) over BLE can trigger this, causing out-of-bounds writes (memory corruption / denial of service) and cross-connection data corruption. The fix moves the buffer into the per-connection instance struct so each connection reassembles into its own buffer. Affects Zephyr releases shipping the Broadcast Assistant with the shared buffer, including v4.4.0 and earlier.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 6.4)

cvss3

Base Score: 6.4

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

1.6

REFERENCES

CVE-2026-61870

SUMMARY

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 2.9)

cvss3

Base Score: 2.9

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.1

Complexity: HIGH

CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.4

REFERENCES

CVE-2026-61861

SUMMARY

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-61858

SUMMARY

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

Published

Date2026-07-11

Updated

Date2026-07-11

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…