Comparison Overview

Massachusetts General Hospital

VS

NewYork-Presbyterian Hospital

Massachusetts General Hospital

55 Fruit Street, Boston, 02114, US
Last Update: 2026-03-30
View Profile
Between 700 and 749
http://www.massgeneral.org

Guided by the needs of our patients and their families, Massachusetts General Hospital aims to deliver the very best health care in a safe, compassionate environment; to advance that care through innovative research and education; and, to improve the health and well-being of the diverse communities we serve. Visit our careers page! http://www.mghcareers.org

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 19,712
Subsidiaries: 2
12-month incidents
0
Known data breaches
2
Attack type number
1
View Profile

NewYork-Presbyterian Hospital

525 E 68th St, New York, New York, US, 10065
Last Update: 2026-03-29
Between 750 and 799
http://www.nyp.org/careers

At NewYork-Presbyterian, we put patients first. It’s the kind of work that requires an unwavering commitment to excellence and a steady spirit of professionalism. And it’s a unique opportunity for you to collaborate with some of the brightest minds in health care, while building on our success as one of the nation’s best hospitals. A career here is one that helps improve the lives of countless human beings throughout the world. From preventive, inpatient and ambulatory care, to technology management and beyond, all of our work is essential to the delivery of top-notch care. Representing a wide range of fields, our talented employees collaborate across several facilities within our network, including: • NewYork-Presbyterian/Columbia University Irving Medical Center • NewYork-Presbyterian/Weill Cornell Medical Center • NewYork-Presbyterian Allen Hospital • NewYork-Presbyterian Brooklyn Methodist Hospital • NewYork-Presbyterian Hudson Valley Hospital • NewYork-Presbyterian Komansky Children's Hospital of Children's Hospital of New York • NewYork-Presbyterian Lower Manhattan Hospital • NewYork-Presbyterian Morgan Stanley Children’s Hospital of Children's Hospital of New York • NewYork-Presbyterian Queens • NewYork-Presbyterian Westchester • NewYork-Presbyterian Westchester Behavioral Health No matter where you work within our organization, you’ll enjoy inspirational and supportive leaders, the latest in technology, and a benefits package that fosters true work-life balance. These are just some of the many reasons why employee engagement and patient satisfaction are at all-time highs within our hospital. Explore our life-changing careers today, and discover the promising future ahead.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 27,353
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/massachusetts-general-hospital.jpeg
Massachusetts General Hospital
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/new-york-presbyterian-hospital.jpeg
NewYork-Presbyterian Hospital
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Massachusetts General Hospital
100%
Compliance Rate
0/4 Standards Verified
NewYork-Presbyterian Hospital
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for Massachusetts General Hospital in 2026.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for NewYork-Presbyterian Hospital in 2026.

Incident History — Massachusetts General Hospital (X = Date, Y = Severity)

Massachusetts General Hospital cyber incidents detection timeline including parent company and subsidiaries

Incident History — NewYork-Presbyterian Hospital (X = Date, Y = Severity)

NewYork-Presbyterian Hospital cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/massachusetts-general-hospital.jpeg
Massachusetts General Hospital
Incidents

Date Detected: 12/2023
Type:Breach
Blog: Blog

Date Detected: 08/2019
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/new-york-presbyterian-hospital.jpeg
NewYork-Presbyterian Hospital
Incidents

Date Detected: 09/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

NewYork-Presbyterian Hospital company demonstrates a stronger AI Cybersecurity Score compared to Massachusetts General Hospital company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Massachusetts General Hospital company has faced a higher number of disclosed cyber incidents historically compared to NewYork-Presbyterian Hospital company.

In the current year, NewYork-Presbyterian Hospital company and Massachusetts General Hospital company have not reported any cyber incidents.

Neither NewYork-Presbyterian Hospital company nor Massachusetts General Hospital company has reported experiencing a ransomware attack publicly.

Both NewYork-Presbyterian Hospital company and Massachusetts General Hospital company have disclosed experiencing at least one data breach.

Neither NewYork-Presbyterian Hospital company nor Massachusetts General Hospital company has reported experiencing targeted cyberattacks publicly.

Neither Massachusetts General Hospital company nor NewYork-Presbyterian Hospital company has reported experiencing or disclosing vulnerabilities publicly.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds any compliance certifications.

Neither company holds any compliance certifications.

Massachusetts General Hospital company has more subsidiaries worldwide compared to NewYork-Presbyterian Hospital company.

NewYork-Presbyterian Hospital company employs more people globally than Massachusetts General Hospital company, reflecting its scale as a Hospitals and Health Care.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds SOC 2 Type 1 certification.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds SOC 2 Type 2 certification.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds ISO 27001 certification.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds PCI DSS certification.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds HIPAA certification.

Neither Massachusetts General Hospital nor NewYork-Presbyterian Hospital holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Published
Date
2026-03-28
Updated
Date
2026-03-28
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Published
Date
2026-03-28
Updated
Date
2026-03-28
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2026-03-28
Updated
Date
2026-03-28
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in elecV2 elecV2P up to 3.8.3. The impacted element is an unknown function of the file /logs of the component Endpoint. This manipulation of the argument filename causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2026-03-28
Updated
Date
2026-03-28
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log/ of the component Wildcard Handler. The manipulation results in path traversal. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Published
Date
2026-03-28
Updated
Date
2026-03-28
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References