Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download
VIVA HEALTH

VIVA HEALTH Vendor Cyber Rating & Cyber Score

vivahealth.com
in
Add Your Compliance Badge
ISO 27001
SOC 2 Type 1
SOC 2 Type 2
PCI DSS
HIPAA
GDPR

Founded in 1995, VIVA HEALTH is now the preferred healthcare provider for close to 300 Alabama companies and more than 100,000 members and growing. With VIVA HEALTH, you get much more than affordable health insurance. You get total peace-of-mind and personalized customer service based right here in Alabama. Not to mention, a high quality plan from a company you can trust. As an affiliate of the UAB Health System, you not only have access to a world-class facility in UAB, but you can also access more than 70 additional hospitals statewide, including major hospitals in Birmingham, Huntsville, Mobile and Montgomery. In addition, you receive worldwide coverage. So it doesn't matter where you are, if you get sick or have an emergency, VIVA


VIVA HEALTH A.I CyberSecurity Scoring

Incident Details
VIVA HEALTH
Company Information
Website:http://www.vivahealth.com
Employees number:491
Number of followers:8,801
NAICS:524
Industry Type:Insurance
Homepage:vivahealth.com
Cyber Premium EstimationGet Supply Chain
VIVA HEALTH Risk Score (AI oriented)
Between 600 and 649
logo
VIVA HEALTHInsurance
Updated:
01/04/2026
628/1000
Poor
Caa
AaaAaABaaBaBCaaCaC
Powered by our proprietary A.I cyber incident model
✖ Insurance prefers TPRM score to calculate premium
VIVA HEALTH Global Score (TPRM)
xxxx
logo
VIVA HEALTHInsurance
•••
Score locked
Instant access to detailed risk factors
Vulnerabilities
Benchmark vs. industry & size peers
Findings

VIVA HEALTH
VIVA HEALTHPoor
Current Score
628Caa (POOR)
01000
2 incidents
0 avg impact
Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.
JULY 2026
636Before Incident
JUNE 2026
635Before Incident
MAY 2026
631Before Incident
APRIL 2026
631Before Incident
MARCH 2026
628Before Incident
FEBRUARY 2026
626Before Incident
JANUARY 2026
623Before Incident
DECEMBER 2025
618Before Incident
NOVEMBER 2025
618Before Incident
OCTOBER 2025
615Before Incident
SEPTEMBER 2025
612Before Incident
AUGUST 2025
609Before Incident
JUNE 2025
687Before Incident
Breach
14 Jun 2025 • VIVA HEALTH
Viva Health

Viva Health Data Breach Exposes Protected Health Information of Nearly 5,000 Members

602After Incident
CRITICAL-85
VIV4102441092725
Viva Health, an Alabama-based health insurance provider serving UAB and Alabama Power employees, experienced a data breach where a file containing limited protected health information (PHI) was exposed on its website from June 14, 2025, to August 27, 2025. The breach affected 4,945 individuals, with leaked data including Medicare Beneficiary Identifiers (MBI), county of residence, Viva Health Member IDs, group numbers, and prior authorization details (e.g., request dates, approval status, and service categories like skilled nursing or diagnostic labs). While unauthorized access was possible, there is no evidence of misuse of the exposed data. Sensitive information such as Social Security numbers, names, dates of birth, addresses, or financial details were not compromised. Viva Health removed the file, reported the incident to regulators, and offered free credit monitoring to affected individuals. The company is enhancing security measures and advising impacted members to monitor their credit and health statements for fraudulent activity.
INCIDENT DETAILS -
TYPE
Data Breach
IMPACT
Medicare Beneficiary Identifier (MBI)County of residenceViva Health Member IDGroup NumberAuthorization Numbers (August–September 2024)General details about prior authorization requests (request/decision dates, approval status, category descriptions)Public-facing website file storageBrand Reputation Impact: Potential reputational harm due to exposure of protected health information; apology issued to affected membersIdentity Theft Risk: Low (no SSNs, names, DOBs, or financial details exposed)Payment Information Risk: None (no payment or financial details compromised)
DATA BREACH
Protected Health Information (PHI)Medicare Beneficiary Identifier (MBI)Member IDsAuthorization detailsNumber Of Records Exposed: 4,945Sensitivity Of Data: Moderate (limited PHI; no SSNs, financial data, or personally identifiable details like names/addresses)Data Exfiltration: Possible (file was accessible for download/copying, but no evidence of misuse)Unspecified file format (likely document or spreadsheet)Personally Identifiable Information: Partial (MBI and member IDs, but no names, SSNs, or direct identifiers)
REFERENCES
Blog URLSource URL
SEPTEMBER 2024
754Before Incident
Breach
01 Sep 2024 • VIVA HEALTH
VIVA Health

VIVA Health Data Exposure Incident

673After Incident
MEDIUM-81
VIV0962109092725
VIVA Health experienced a cybersecurity incident where a file containing protected health information (PHI) was left publicly accessible on its website from June 14 to August 27, 2025. The exposed data affected 4,945 individuals and included Medicare Beneficiary Identifiers, member IDs, group numbers, county of residence, authorization numbers (August–September 2024), and prior authorization request details. While no Social Security numbers, financial data, names, birth dates, or addresses were compromised, unauthorized parties may have accessed or copied the file. Investigators found no evidence of misuse, but the company is offering one year of free credit monitoring as a precaution. Notifications were mailed to affected members, who are advised to monitor their Explanation of Benefits (EOB) and credit reports for fraud. The incident was reported to state and federal regulators, and the exposed file was immediately removed upon discovery.
INCIDENT DETAILS -
TYPE
Data Exposure / Unauthorized Access
IMPACT
Medicare Beneficiary IdentifiersMember IDsGroup NumbersCounty of ResidenceAuthorization Numbers (August–September 2024)Prior Authorization Request DetailsWebsite file storage systemOperational Impact: Minimal (file removed; notifications and credit monitoring deployed)Brand Reputation Impact: Moderate (apology issued; trust reassurance emphasized)Identity Theft Risk: Low (no SSNs or financial data exposed)
DATA BREACH
Protected Health Information (PHI)Medicare Beneficiary IdentifiersAuthorization DetailsNumber Of Records Exposed: 4,945Sensitivity Of Data: Moderate (no SSNs, financial data, or full PII)Data Exfiltration: Possible (unauthorized access/copying suspected but no evidence of misuse)Text/CSV or similar (file format unspecified)Partial (Member IDs, group numbers, county of residence)
REFERENCES
Blog URLSource URL

Frequently Asked Questions

?
What is the current A.I Rankiteo Cyber Score for VIVA HEALTH ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in June 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in May 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in April 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in March 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in February 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in January 2026 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in December 2025 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in November 2025 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in October 2025 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in September 2025 ?
?
What was VIVA HEALTH's A.I Rankiteo Cyber Score in August 2025 ?
?
What is the average per-incident point impact on VIVA HEALTH's A.I Rankiteo Cyber Score over the past 12 months ?
?
Where can I access detailed records of all cyber incidents associated with VIVA HEALTH ?
?
Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ?
?
Where can I view VIVA HEALTH's profile page on Rankiteo ?
?
How accurate is the A.I Rankiteo Risk Scoring methodology ?