
Mercy Health Company Cyber Security Posture
mercy.comAt Mercy Health, we understand that every family is a universe. A network of people who love, and support, and count on one other to be there. Everybody means the world to someone and we are committed to care for others so they can be there for the ones they love. With nearly 35,000 employees across regions of Ohio and Kentucky, we’re one of the largest health care systems in the country. At each of our more than 600 points of care, we deliver high-quality, compassionate care with one united purpose: to help our patients be well in mind, body and spirit.
Mercy Health Company Details
mercyhealth-chp
14050 employees
74559.0
62
Hospitals and Health Care
mercy.com
Scan still pending
MER_1765720
Scan started

Between 800 and 900
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

.png)

Mercy Health Company Scoring based on AI Models
Model Name | Date | Description | Current Score Difference | Score |
---|---|---|---|---|
AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 800 and 900 |
Mercy Health Company Cyber Security News & History
Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
---|---|---|---|---|---|---|---|
Bon Secours | Breach | 100 | 5 | 08/2016 | BON341622 | Link | |
Rankiteo Explanation : Attack threatening the organization's existenceDescription: Bon Secours Health System, based in Marriottsville, Md., suffered from a data breach incident after that 655,000 patients health information were exposed as a result of an error made by one of its business associates. The compromised information included names, social security numbers, insurance and banking information, and some clinical data. Bon Secours conducted a two-month internal investigation of the incident, and offered a year of credit monitoring and identity theft protection services without charge. | |||||||
Mercy Health | Breach | 25 | 1 | 01/2020 | MER21861222 | Link | |
Rankiteo Explanation : Attack without any consequencesDescription: Mercy Health Lorain Hospital Laboratory experienced HIPAA breach due to contractor invoice printing error. No actual or attempted access or misuse of patient or guarantor information has been discovered. Batches of medical invoices created and mailed by RCM’s contracted mailing vendor were printed incorrectly. Instead of the name, street address, city, state, and zip code of the patient (or his/her guarantor) appearing in the clear address “window” of the envelope, what actually appeared were names, street addresses, and Social Security numbers. |
Mercy Health Company Subsidiaries

At Mercy Health, we understand that every family is a universe. A network of people who love, and support, and count on one other to be there. Everybody means the world to someone and we are committed to care for others so they can be there for the ones they love. With nearly 35,000 employees across regions of Ohio and Kentucky, we’re one of the largest health care systems in the country. At each of our more than 600 points of care, we deliver high-quality, compassionate care with one united purpose: to help our patients be well in mind, body and spirit.
Access Data Using Our API

Get company history
.png)
Mercy Health Cyber Security News
Navy’s Military Sealift Command Upgrades IT to Ensure Health Care Continuity
The Navy's Military Sealift Command is modernizing its IT infrastructure and consolidating data centers to improve health care and save ...
Mercy Health Agrees to Pay $1.8 Million to Settle Insider Data Breach Lawsuit
Mercy Health has agreed to a $1.8 million settlement to resolve all claims related to a 2020 HIPAA compliance data breach that affected ...
Take action to prevent ransomware attacks
Data security best practices, bolstered by Philips healthcare-specific technology and solutions, can help you defend against ransomware attacks.
Q&A: How redundancy enabled resilience after Crowdstrike outage
A hybrid cloud platform supported stroke patient care after the worldwide IT disruption knocked out its electronic health records.
Health Care Safety and Security Best Practices – Your Questions Answered
An insightful and interactive webinar dedicated to exploring safety and security best practices in a health care setting.
Mercy Health patients among giant data breach affecting 8.9 million people, company says
The hacking of PJ&A's network server affects more than 8.9 million people, according to the U.S. Department of Health and Human Services. The ...
Mercy Medical Center alerts 97K patients at risk in security breach
Mercy Medical Center in Cedar Rapids has notified 97,000 patients about a security breach that might have compromised their personal ...
Mercy Health data breach $1.8M class action settlement
Consumers could receive benefits from a $1.8 million Mercy Health data breach settlement resolving claims it failed to protect patients from a 2020 data breach ...
Bon Secours Mercy Health, vendor hit with lawsuit after data breach
The suit alleges the health system and a vendor failed to implement standards or promptly alert people whose data may have been exposed ...

Mercy Health Similar Companies

University Hospitals Bristol and Weston NHS Foundation Trust
We are University Hospitals Bristol and Weston NHS Foundation Trust (UHBW). One of the largest acute Trusts in the country, bringing together a combined workforce of over 13,000 staff and over 100 different clinical services across 10 different sites, serving a core population of more than 500,000 p

Health New Zealand | Waitaha Canterbury
Health New Zealand - Waitaha Canterbury is transforming the delivery of health care services and is recognised in New Zealand and overseas for our extraordinary journey. We are leading the world delivering integrated and connected health care services that put patient’s right at the heart. Ev

Unimed BH
A Unimed-BH é a operadora que mais investe na saúde dos mineiros. São 6 milhões de consultas médicas, 120 mil internações hospitalares e 13 milhões de exames e terapias complementares realizados em um ano. E a Cooperativa está sempre inovando, com serviços diferenciados, como o Agendamento On-lin

University Health Network
University Health Network (UHN) is Canada's largest research hospital, which includes Toronto General and Toronto Western Hospitals, Princess Margaret Cancer Centre, the Toronto Rehabilitation Institute and the Michener Institute for Education at UHN. The scope of research and complexity of cases at

EsSalud
El Seguro Social de Salud, EsSalud, es un organismo público descentralizado, con personería jurídica de derecho público interno, adscrito al Sector Trabajo y Promoción Social. Tiene por finalidad dar cobertura a los asegurados y sus derechohabientes, a través del otorgamiento de prestaciones

Endeavor Health
NorthShore University HealthSystem, Swedish Hospital, Northwest Community Healthcare and Edward-Elmhurst Health are now united under one name: Endeavor Health. Together, we’re driven by our mission to help everyone in our communities be their best and our commitment to setting a new standard for he
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
