What is the official website of Appalachian Regional Healthcare System ?

The official website of Appalachian Regional Healthcare System is https://www.unchealthappalachian.org/.

What is Appalachian Regional Healthcare System's cybersecurity risk score?

Appalachian Regional Healthcare System has an AI-generated cybersecurity risk score of 765 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Appalachian Regional Healthcare System experienced?

According to Rankiteo, Appalachian Regional Healthcare System currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Appalachian Regional Healthcare System been affected by any supply chain cyber incidents ?

According to Rankiteo, Appalachian Regional Healthcare System has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Appalachian Regional Healthcare System have SOC 2 Type 1 certification ?

According to Rankiteo, Appalachian Regional Healthcare System is not certified under SOC 2 Type 1.

Does Appalachian Regional Healthcare System have SOC 2 Type 2 certification ?

According to Rankiteo, Appalachian Regional Healthcare System does not hold a SOC 2 Type 2 certification.

Does Appalachian Regional Healthcare System comply with GDPR ?

According to Rankiteo, Appalachian Regional Healthcare System is not listed as GDPR compliant.

Does Appalachian Regional Healthcare System have PCI DSS certification ?

According to Rankiteo, Appalachian Regional Healthcare System does not currently maintain PCI DSS compliance.

Does Appalachian Regional Healthcare System comply with HIPAA ?

According to Rankiteo, Appalachian Regional Healthcare System is not compliant with HIPAA regulations.

Does Appalachian Regional Healthcare System have ISO 27001 certification ?

According to Rankiteo,Appalachian Regional Healthcare System is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Appalachian Regional Healthcare System operate in ?

Appalachian Regional Healthcare System operates primarily in the Hospitals and Health Care industry.

How many employees does Appalachian Regional Healthcare System have ?

Appalachian Regional Healthcare System employs approximately 785 people worldwide.

Does Appalachian Regional Healthcare System own any subsidiaries ?

Appalachian Regional Healthcare System presently has no subsidiaries across any sectors.

How many LinkedIn followers does Appalachian Regional Healthcare System have ?

Appalachian Regional Healthcare System's official LinkedIn profile has approximately 5,528 followers.

What is the NAICS classification code for Appalachian Regional Healthcare System ?

Appalachian Regional Healthcare System is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Appalachian Regional Healthcare System have a Crunchbase profile ?

No, Appalachian Regional Healthcare System does not have a profile on Crunchbase.

Does Appalachian Regional Healthcare System have a LinkedIn profile ?

Yes, Appalachian Regional Healthcare System maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/unchealthappalachian.

How many cybersecurity incidents has Appalachian Regional Healthcare System experienced ?

As of June 21, 2026, Rankiteo reports that Appalachian Regional Healthcare System has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Appalachian Regional Healthcare System have ?

Appalachian Regional Healthcare System has an estimated 33,083 peer or competitor companies worldwide.

What types of cybersecurity incidents has Appalachian Regional Healthcare System faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ARHS

Boost Score +25 with badge (5 left)

765

/1000

Fair

790

/1000

Fair

Appalachian Regional Healthcare System Vendor Cyber Rating & Cyber Score

unchealthappalachian.org

Add Your Compliance Badge

UNC Health Appalachian, the healthcare leader in the High Country, is comprised of three hospitals, fifteen medical practices, a cancer center, a heart and vascular center, a pain management center, a physical therapy rehabilitation and wellness center, and a healthcare foundation.

ARHS A.I CyberSecurity Scoring

Scoring History

ARHS

Appalachian Regional Healthcare System CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Appalachian Regiona...

Breach

03/2017

UNC93815722

Loading…

A.I.

ARHS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ARHS

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Appalachian Regional Healthcare System in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Appalachian Regional Healthcare System in 2026.

Incident Types ARHS vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Appalachian Regional Healthcare System in 2026.

Incident History - ARHS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Appalachian Regional Healthcare System Subsidiaries

ARHS

Hospitals and Health Care

Website: https://www.unchealthappalachian.org/

Company Size: 785

UNC HealthHospitals and Health Care

Loading…

Appalachian Regional Healthcare System Similar Companies

Advocate Aurora Health

cb advocateaurorahealth.org

Advocate Aurora Health and Atrium Health are now Advocate Health – the fifth-largest nonprofit integrated health system in the U.S. Advocate Health is the fifth-largest nonprofit integrated health system in the United States –created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois, Atrium Health in the Carolinas, Georgia and Alabama, and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care, with Wake Forest University School of Medicine serving as the academic core of the enterprise. Headquartered in Charlotte, North Carolina, Advocate Health serves nearly 6 million patients and is engaged in hundreds of clinical trials and research studies. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 67 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social

Johnson & Johnson

jnj.com

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com. Community Guidelines: http://www.jnj.com/social-media-community-guidelines

Greater Paris University Hospitals - AP-HP

aphp.fr

AP-HP (Greater Paris University Hospitals) is a European world-renowned university hospital. Its 39 hospitals treat 8 million people every year: in consultation, emergency, during scheduled or home hospitalizations. The AP-HP provides a public health service for everyone, 24 hours a day. This mission is a duty as well as a great source of pride. AP-HP is the leading employer in the Greater Paris area: 100.000 staff members – doctors, researchers, paramedical staff, administrative personnel and workers – work there.

Vancouver Coastal Health

vch.ca

Join a team connected by collaboration, support and most importantly, the goal of providing quality patient care. We value career growth with employer-supported training, encourage a culture where everyone’s voice is heard and strive to create a supportive team environment. To learn more, visit vch.ca/careers Facebook - https://www.facebook.com/VCHhealthcare/ Twitter - https://twitter.com/VCHhealthcare YouTube - https://www.youtube.com/@VCHhealthcare Instagram - https://www.instagram.com/vchhealthcare/

International SOS

cb internationalsos.com

The International SOS Group of Companies has been in the business of saving lives for over 40 years. Protecting global workforces from health and security threats, we deliver customised health, security risk management and wellbeing solutions to fuel our clients’ growth and productivity. In the event of extreme weather, an epidemic or a security incident, we provide an immediate response providing peace of mind. Our innovative technology and medical expertise with a focus on prevention, offers real-time, actionable insights and unparalleled on-the-ground delivery. We help clients meet compliance reporting needs for good governance. By partnering with us organisations can fulfil their Duty of Care responsibilities, while empowering business resilience, continuity and sustainability. Founded in 1985, the International SOS Group, headquartered in London & Singapore, is trusted by 9,000 organisations, including the majority of the Fortune Global 500 as well as mid-size enterprises, governments, educational institutions, and NGOs. 12,000 multi-cultural medical, security and logistics experts stand with you to provide support & assistance from over 1,200 locations in 90 countries, 24/7, 365 days. To protect your workforce, we are at your fingertips: www.internationalsos.com For news and events updates follow us on Twitter - https://twitter.com/IntlSOS

Bupa UK

bupa.co.uk

Established in 1947, Bupa's purpose is helping people live longer, healthier, happier lives and making a better world. We are a healthcare company serving millions of customers. With no shareholders, we reinvest profits into providing more and better healthcare for the benefit of current and future customers. For more information, visit www.bupa.co.uk

Inova Health

inova.org

We are Inova, Northern Virginia and the Washington, D.C. metropolitan area’s leading nonprofit healthcare provider. With expertise and compassion, we partner with our patients to help them stay healthy. We treat illness, heal injury and look at a patient’s whole health to help them flourish. Through our expansive network of hospitals, primary and specialty care practices, emergency and urgent care centers, and outpatient services, Inova provides care for more than 1 million unique patients every year. Total patient visits exceed 4 million annually, demonstrating our ability to deliver the best clinical care and ensuring a seamless experience for all who rely on us for their healthcare needs. Consistently ranked and recognized as a national healthcare leader in safety, quality and patient experience, Inova’s world-class care is made possible by the strength and breadth of our network, our 26,000 team members, our technology and our innovation. In 2025, Inova was named the Health System of the Year by Press Ganey, a national leader in healthcare experience, recognizing our excellence in patient care, team member engagement, and commitment to continuous improvement. Inova is home to Northern Virginia’s only Level 1 Trauma Center and Level 4 Neonatal Intensive Care Unit and provides high-quality healthcare to each person in every community we are privileged to serve – regardless of ability to pay – every day of their life. More information about Inova can be found at www.inova.org.

Advocate Health

advocatehealth.org

Advocate Health is redefining how, when and where care is delivered to help people live well. We’re providing equitable care for all in our communities and using our combined strength and expertise to deliver better outcomes at a lower cost. Headquartered in Charlotte, North Carolina, we have a combined footprint across six states – Alabama, Georgia, Illinois, North Carolina, South Carolina and Wisconsin – and maintain a strong organizational presence in Chicago and Milwaukee.

St. Luke's University Health Network

sluhn.org

Founded in 1872, St. Luke’s University Health Network (SLUHN) is a fully integrated, regional, non-profit network of more than 23,000 employees providing services at 16 campuses and 350+ outpatient sites. With annual net revenue of $4 billion, the Network’s service area includes 11 counties in two states: Lehigh, Northampton, Berks, Bucks, Carbon, Montgomery, Monroe, Schuylkill and Luzerne counties in Pennsylvania and Warren and Hunterdon counties in New Jersey. St. Luke’s hospitals operate the largest network of trauma centers in Pennsylvania, with the Bethlehem Campus being home to St. Luke’s Children’s Hospital. Dedicated to advancing medical education, St. Luke’s is the preeminent teaching hospital in central-eastern Pennsylvania. In partnership with Temple University, the Network established the Lehigh Valley’s first and only four-year medical school campus. It also operates the nation’s longest continuously operating School of Nursing, established in 1884, and over 50 fully accredited graduate medical educational programs with more than 500 residents and fellows. In 2022, St. Luke’s, a member of the Children’s Hospital Association, opened the Lehigh Valley’s first and only free-standing facility dedicated entirely to kids. SLUHN is the only Lehigh Valley-based health care system to earn Medicare’s five-star ratings (the highest) for quality, efficiency and patient satisfaction. It is both a Leapfrog Group and Healthgrades Top Hospital and a Newsweek World’s Best Hospital. The Network’s flagship University Hospital has earned the 100 Top Major Teaching Hospital designation from Premier 13 times total and eleven years in a row, including in 2023 when it was identified as THE #4 TEACHING HOSPITAL IN THE COUNTRY.

Loading…

NEWS

Appalachian Regional Healthcare System CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 19, 2025 11:52 PM

Infrastructure Implementation Resources

As Governors lead on implementing the historic bipartisan Infrastructure Investment and Jobs Act (IIJA), the National Governors Association will be...

Read Article

February 19, 2025 08:00 AM

Change Healthcare data breach: Industry 'not fine' 1 year later

It's been one year since the unprecedented Change Healthcare cyberattack crippled hospitals, medical groups, payers and pharmacies. For some providers,...

Read Article

January 28, 2025 08:00 AM

Which Federal Programs Are Under Scrutiny? The Budget Office Named 2,600 of Them. (Published 2025)

The Trump administration ordered temporary freezes in funding for programs spanning virtually every part of the government.

Read Article

September 25, 2024 07:00 AM

Capito Secures CDS Awards to Expand Health Facilities and Services in West Virginia

WASHINGTON, D.C. – Today, U.S. Senator Shelley Moore Capito (R-W.Va.), Ranking Member of the Senate Appropriations Subcommittee on Labor,...

Read Article

October 30, 2023 07:00 AM

Trinity Health appoints two new leaders, and more | MED MOVES

Trinity Health, the Catholic system based in Michigan, has named leaders for two important roles. Trinity Health has named Corinne R.

Read Article

September 03, 2021 06:22 PM

Clinicians Urge COVID-19 Vaccination to Defeat an ‘Unrelenting Foe’

Clinicians at Appalachian Regional Healthcare System on the resurgence in COVID-19 hospitalizations: “This wave has broken our spirits.”

Read Article

January 31, 2019 09:16 AM

Appalachian Regional Healthcare Hit with Cyber Attack, Systems Down for a Week

Appalachian Regional Healthcare (ARH), a health system with hospitals in eastern Kentucky and southern West Virginia, is still in the process of trying to...

Read Article

May 26, 2017 07:00 AM

MEDITECH Signs 5 New Clients to Implement Ambulatory Web EHR

EHR provider MEDITECH has recently signed five new organizations, representing 16 new hospitals to implement its clinically-integrated Web...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56355

SUMMARY

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-56347

SUMMARY

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site visitors, potentially stealing session cookies or performing unauthorized actions.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.8

REFERENCES

CVE-2026-56346

SUMMARY

AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decrypt PGP messages. Remote attackers can submit private keys, ciphertext, and passphrases to perform server-side decryption without credentials, exposing key material to logs and enabling resource exhaustion attacks.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-56345

SUMMARY

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload with a filename containing an arbitrary users_id to invoke passwordless User->login() and establish an authenticated session as any user including admin. Attackers can obtain the Meet shared secret through path-traversal vulnerabilities or timing attacks against checkToken.json.php, then POST a crafted file to uploadRecordedVideo.json.php with a filename like '1-anything.mp4' to hijack admin sessions and gain full account takeover.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-56342

SUMMARY

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL() validation and accepts requests to private IP ranges and cloud metadata endpoints. Attackers can exploit this by crafting requests to internal services, cloud metadata endpoints like 169.254.169.254, and localhost to retrieve sensitive information including IAM credentials, internal service responses, and network configuration details.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…