Health Resources and Services Administration (HRSAgov), HHS Company Cyber Security Posture

hrsa.gov

The Health Resources and Services Administration (HRSA), an agency of the Department of Health and Human Services, improves access to health care services for underserved and rural communities and people with HIV, strengthens maternal and child health, and grows the health care workforce.

HRSA(H Company Details

Linkedin ID:

hrsagov

Employees number:

2780 employees

Number of followers:

46351.0

NAICS:

922

Industry Type:

Government Administration

Homepage:

hrsa.gov

IP Addresses:

Scan still pending

Company ID:

HEA_8640778

Scan Status:

In-progress

AI scoreHRSA(H Risk Score (AI oriented)

Between 900 and 1000

This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

globalscoreHRSA(H Global Score
blurone
Ailogo

Health Resources and Services Administration (HRSAgov), HHS Company Scoring based on AI Models

Model NameDateDescriptionCurrent Score DifferenceScore
AVERAGE-Industry03-12-2025

This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers.

N/A

Between 900 and 1000

Health Resources and Services Administration (HRSAgov), HHS Company Cyber Security News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenUrl IDDetailsView
Health Resources and Services Administration (HRSAgov), HHSBreach100502/2017HEA1313191123Link
Rankiteo Explanation :
Attack threatening the organizationโ€™s existence

Description: A Russian-speaking black hat hacker known as Rasputin hacked the computer networks of over 60 institutions and US government entities, according to threat intelligence firm Recorded Future. Rasputin breaches target systems using SQL injection flaws, stealing confidential data that he then sells on underground marketplaces for crimes. Numerous US government entities, more than two dozen US universities, and ten UK universities were among the many victims of the Rasputins that Recorded Future researchers were able to identify. The Department of Housing and Urban Development, the National Oceanic and Atmospheric Administration, the Postal Regulatory Commission, and the Health Resources and Services Administration are among the organisations on the victim list.

Health Resources and Services Administration (HRSAgov), HHS Company Subsidiaries

SubsidiaryImage

The Health Resources and Services Administration (HRSA), an agency of the Department of Health and Human Services, improves access to health care services for underserved and rural communities and people with HIV, strengthens maternal and child health, and grows the health care workforce.

Loading...

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=hrsagov' -H 'apikey: YOUR_API_KEY_HERE'
newsone

HRSA(H Cyber Security News

2024-04-12T07:00:00.000Z
HHS proves NOFOs can be less complex, easier for applicants

The HHS pilot showed that reducing the number of pages that make up NOFOs can be done and the grant still meets all the compliance and outcomeย ...

similarCompanies

HRSA(H Similar Companies

State of Tennessee

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, co

Gouvernement du Quรฉbec โ€“ Carriรจres

Travailler dans la fonction publique du Quรฉbec, c'est plus qu'une carriรจre! Rรฉparti(e)s dans une vingtaine de ministรจres et une soixantaine d'organismes ร  travers le Quรฉbec, tous les gestes posรฉs par les employรฉ(e)s de la fonction publique faรงonnent lโ€™avenir de la sociรฉtรฉ et contribuent ร  amรฉliorer

U.S. Census Bureau

The Census Bureau serves as the nationโ€™s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statis

Ontario Government | Gouvernement de lโ€™Ontario

Ontario Government | Gouvernement de lโ€™Ontario The Ontario Government works to serve the public interest and uphold the public trust by providing Ministers with objective advice and expert guidance. The Ontario Public Service carries out the decisions and policies of the elected government with int

State of Indiana

State government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums

Polโˆšโ‰ cia Civil de Minas Gerais (PCMG)

ApuraโˆšรŸโˆšยฃo de crimes e contravenโˆšรŸโˆšยตes, por meio da investigaโˆšรŸโˆšยฃo criminal cientificamente aplicada, e o exercโˆšโ‰ cio da polโˆšโ‰ cia judiciโˆšยฐria para o esclarecimento de autoria, materialidade, motivo e circunstโˆšยขncia, bem como a identificaโˆšรŸโˆšยฃo civil e criminal, o registro e licenciamento de veโˆšโ‰ culos,

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

HRSA(H CyberSecurity History Information

How many cyber incidents has HRSA(H faced?

Total Incidents: According to Rankiteo, HRSA(H has faced 1 incident in the past.

What types of cybersecurity incidents have occurred at HRSA(H?

Incident Types: The types of cybersecurity incidents that have occurred incident Breach.

Incident Details

Can you provide details on each incident?

Incident : Data Breach

Title: Rasputin Hacks Over 60 Institutions and US Government Entities

Description: A Russian-speaking black hat hacker known as Rasputin hacked the computer networks of over 60 institutions and US government entities, according to threat intelligence firm Recorded Future. Rasputin breaches target systems using SQL injection flaws, stealing confidential data that he then sells on underground marketplaces for crimes. Numerous US government entities, more than two dozen US universities, and ten UK universities were among the many victims of the Rasputin that Recorded Future researchers were able to identify. The Department of Housing and Urban Development, the National Oceanic and Atmospheric Administration, the Postal Regulatory Commission, and the Health Resources and Services Administration are among the organisations on the victim list.

Type: Data Breach

Attack Vector: SQL Injection

Vulnerability Exploited: SQL Injection Flaws

Threat Actor: Rasputin

Motivation: Financial Gain

What are the most common types of attacks the company has faced?

Common Attack Types: The most common types of attacks the company has faced is Breach.

How does the company identify the attack vectors used in incidents?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through SQL Injection Flaws.

Impact of the Incidents

What was the impact of each incident?

Incident : Data Breach HEA1313191123

Data Compromised: Confidential Data

What types of data are most commonly compromised in incidents?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Confidential Data.

Which entities were affected by each incident?

Incident : Data Breach HEA1313191123

Entity Type: Government Entity

Industry: Government

Location: USA

Incident : Data Breach HEA1313191123

Entity Type: Government Entity

Industry: Government

Location: USA

Incident : Data Breach HEA1313191123

Entity Type: Government Entity

Industry: Government

Location: USA

Incident : Data Breach HEA1313191123

Entity Type: Government Entity

Industry: Government

Location: USA

Data Breach Information

What type of data was compromised in each breach?

Incident : Data Breach HEA1313191123

Type of Data Compromised: Confidential Data

References

Where can I find more information about each incident?

Incident : Data Breach HEA1313191123

Source: Recorded Future

Where can stakeholders find additional resources on cybersecurity best practices?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Recorded Future.

Initial Access Broker

How did the initial access broker gain entry for each incident?

Incident : Data Breach HEA1313191123

Entry Point: SQL Injection Flaws

Additional Questions

General Information

Who was the attacking group in the last incident?

Last Attacking Group: The attacking group in the last incident was an Rasputin.

Impact of the Incidents

What was the most significant data compromised in an incident?

Most Significant Data Compromised: The most significant data compromised in an incident was Confidential Data.

Data Breach Information

What was the most sensitive data compromised in a breach?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Confidential Data.

References

What is the most recent source of information about an incident?

Most Recent Source: The most recent source of information about an incident is Recorded Future.

Initial Access Broker

What was the most recent entry point used by an initial access broker?

Most Recent Entry Point: The most recent entry point used by an initial access broker was an SQL Injection Flaws.

What Do We Measure?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge