Cone Health Company Cyber Security Posture
conehealth.comIf you can imagine working alongside 13,000 others deeply committed to the well-being of over 1 million neighbors, then you already have a clear picture of what it’s like to be part of Cone Health. Ours is a culture of caring grounded in a simple, but powerful promise to our patients, our communities and to each other: We Are Right Here With You. Working here is an opportunity to learn, teach, share and grow with committed and passionate health care professionals who celebrate and encourage individual success as well as team achievement. As a not-for-profit healthcare provider serving central North Carolina, including Alamance, Forsyth, Guilford, Randolph, Rockingham and surrounding counties, our comprehensive network includes: • 5 hospitals • 3 ambulatory care centers • 3 outpatient surgery centers • 6 urgent care centers • 2 retirement communities • 120+ physician practices No matter your location, department, field or position you’ll be supported personally and professionally with benefits designed to keep each and every employee satisfied, engaged and inspired.
Cone Health Company Details
cone-health
7258 employees
39521.0
62
Hospitals and Health Care
conehealth.com
Scan still pending
CON_6481039
In-progress
Cone Health Risk Score (AI oriented)Between 800 and 900
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
Cone Health Global Score.png)
Cone Health Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 800 and 900 |
Cone Health Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Cone Health | Ransomware | 80 | 4 | 07/2020 | CON22578222 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: The Alamance Skin Center, a Cone Health practice was targeted in a ransomware attack. The phishing attack was aimed to steal credentials and protected health information and data including patient names, addresses, health record numbers, birth dates, diagnosis details, and date(s) of service was breached in the incident. The company immediately took quick action to separate the impacted systems and asked help from forensics experts to deal with the attack. | |||||||
Cone Health Company Subsidiaries
If you can imagine working alongside 13,000 others deeply committed to the well-being of over 1 million neighbors, then you already have a clear picture of what it’s like to be part of Cone Health. Ours is a culture of caring grounded in a simple, but powerful promise to our patients, our communities and to each other: We Are Right Here With You. Working here is an opportunity to learn, teach, share and grow with committed and passionate health care professionals who celebrate and encourage individual success as well as team achievement. As a not-for-profit healthcare provider serving central North Carolina, including Alamance, Forsyth, Guilford, Randolph, Rockingham and surrounding counties, our comprehensive network includes: • 5 hospitals • 3 ambulatory care centers • 3 outpatient surgery centers • 6 urgent care centers • 2 retirement communities • 120+ physician practices No matter your location, department, field or position you’ll be supported personally and professionally with benefits designed to keep each and every employee satisfied, engaged and inspired.
Access Data Using Our API
Get company history
Rapid.png)
Cone Health Cyber Security News
Cone Health names behavioral leader
Greensboro, NC-based Cone Health has named Dave Jenkins as vice president of behavioral health services.
Health systems spend millions to reduce workplace violence
Health systems are spending millions of dollars ramping up security measures at their facilities to protect patients and staff.
Managing Your Business' Cyber Security Risk
As companies across industries deploy ever-expanding technology, cyberattacks--a computer system breach by an outside entity--continue to ...
Risant Health to invest $1 billion in Cone Health
Beyond capital, Risant Health's value-based care platform provides tools, technology and services to speed a drive to value. This transformation ...
Risant Health’s 4 Criteria as It Looks to Grow Beyond Geisinger, Cone Health
Risant is the nonprofit organization created by Kaiser Foundation Hospitals to expand and accelerate the adoption of value-based care in diverse ...
Kaiser Permanente’s Risant Health completes acquisition of Cone Health, and more deals are likely
The Risant acquisition of Cone Health reflects the uptick in hospital deals this year. There were 27 announced hospital mergers and acquisitions ...
Ott Cone & Redpath Data Breach Class Action
At Console & Associates, our data breach lawyers are closely examining the recent Ott Cone & Redpath data breach.
Business Analytics Day celebrated AI, mentorship and real-world impact
This year's theme, “Ignite the Future: AI in Action, Powered by Mentorship”, featured panel discussions, hands-on workshops and mentoring activities throughout ...
Top 10 Tech Internships Offered in Greensboro
Discover the top tech internships in Greensboro, North Carolina, ideal for tech students and fresh graduates. Companies like Honda Aircraft, ...
Cone Health Similar Companies
Servei de Salut de les Illes Balears
1. Misión El Servicio de Salud de las Islas Baleares tiene como misión proveer de servicios sanitarios públicos a sus usuarios a fin de satisfacer sus necesidades de salud, bajo los principios de equidad, eficiencia y calidad y por medio del desarrollo de actividades de promoción, prevención, cu
NYU Langone Health
NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center i
St Peters
With nearly 12,500 employees in more than 165 locations, St. Peter's Health Partners provides high-quality, compassionate care to thousands of people every day across the greater Capital Region. St. Peter's Health Partners was created in 2011 through the merger of Seton Health, Northeast Health
AdventHealth
AdventHealth is a connected network of care that helps people feel whole – body, mind and spirit. More than 100,000 team members across a national footprint provide whole-person care to nearly nine million people annually through more than 2,000 care sites that include hospitals, physician practices
Kaiser Permanente
At the heart of health care, you’ll find Kaiser Permanente. As the nation’s leading not-for-profit, integrated health plan, we make a difference in the lives of members, patients, and communities across the country. With 39 hospitals and more than 734 locations in eight states and the District of
Tenet Healthcare
Tenet Healthcare Corporation (NYSE: THC) is a diversified healthcare services company headquartered in Dallas. Our care delivery network includes United Surgical Partners International, the largest ambulatory platform in the country, which operates ambulatory surgery centers and surgical hospitals.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Cone Health CyberSecurity History Information
How many cyber incidents has Cone Health faced?
Total Incidents: According to Rankiteo, Cone Health has faced 1 incident in the past.
What types of cybersecurity incidents have occurred at Cone Health?
Incident Types: The types of cybersecurity incidents that have occurred incident Ransomware.
How does Cone Health detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through third party assistance with Forensics Experts and containment measures with System Isolation.
Incident Details
Can you provide details on each incident?
Incident : Ransomware
Title: Ransomware Attack on Alamance Skin Center
Description: The Alamance Skin Center, a Cone Health practice, was targeted in a ransomware attack. The phishing attack aimed to steal credentials and protected health information. Data including patient names, addresses, health record numbers, birth dates, diagnosis details, and date(s) of service was breached in the incident. The company immediately took quick action to separate the impacted systems and asked help from forensics experts to deal with the attack.
Type: Ransomware
Attack Vector: Phishing
Motivation: Data Theft
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Ransomware.
Impact of the Incidents
What was the impact of each incident?
Incident : Ransomware CON22578222
Data Compromised: patient names, addresses, health record numbers, birth dates, diagnosis details, date(s) of service
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are patient names, addresses, health record numbers, birth dates, diagnosis details and date(s) of service.
Which entities were affected by each incident?
Response to the Incidents
What measures were taken in response to each incident?
Incident : Ransomware CON22578222
Third Party Assistance: Forensics Experts
Containment Measures: System Isolation
How does the company involve third-party assistance in incident response?
Third-Party Assistance: The company involves third-party assistance in incident response through Forensics Experts.
Data Breach Information
What type of data was compromised in each breach?
Incident : Ransomware CON22578222
Type of Data Compromised: patient names, addresses, health record numbers, birth dates, diagnosis details, date(s) of service
Sensitivity of Data: High
Personally Identifiable Information: patient names, addresses, health record numbers, birth dates
How does the company handle incidents involving personally identifiable information (PII)?
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through was System Isolation.
Post-Incident Analysis
What is the company's process for conducting post-incident analysis?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Forensics Experts.
Additional Questions
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were patient names, addresses, health record numbers, birth dates, diagnosis details and date(s) of service.
Response to the Incidents
What third-party assistance was involved in the most recent incident?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was Forensics Experts.
What containment measures were taken in the most recent incident?
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was System Isolation.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were patient names, addresses, health record numbers, birth dates, diagnosis details and date(s) of service.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
