Cardinal Health

Sentara Health is a not-for-profit integrated healthcare system that's been serving communities for more than 125 years. What started in 1888 as a small hospital in Norfolk has grown into a network of over 300 sites of care across Virginia, North Carolina, and Florida. We operate 12 hospitals, and our team includes more than 1,600 physicians and advanced practice providers who complete over 2.8 million patient visits each year. Our mission is straightforward: we improve health every day. We're proud to be recognized as one of the nation's top health systems - IBM Watson Health named us among the "Top 15 Healthcare Systems," and we've consistently ranked at the top of U.S. News & World Report's best hospitals for over 18 years running. Eight of our hospitals have achieved Magnet Recognition Program® designation, the highest quality credential for nursing, awarded to fewer than 8% of hospitals nationwide. We combine state-of-the-art technology with expert multidisciplinary care teams to deliver quality outcomes, while constantly innovating to create new methods of care and measure our effectiveness.

Vatica Health is the leading provider-centric risk adjustment and quality of care solution, transforming how healthcare organizations optimize performance through innovative technology and clinical expertise. Founded in 2011, the company serves over 1.7 million patients across 41 states through partnerships with 11,000+ providers and 14 national and regional health plan clients. Vatica Health has earned the prestigious Best in KLAS® award for three consecutive years (2023-2025), recognizing its excellence in risk adjustment software and professional services. The company's unique model pairs expert clinical teams with comprehensive data and intuitive technology at the point of care, enabling healthcare organizations to achieve better financial and clinical outcomes. By capturing more accurate and complete diagnosis codes, Vatica Health helps improve coding accuracy by approximately 10% per patient, close care gaps, enhance compliance, and reduce regulatory risk. The organization has experienced significant growth, including acquisition by Frazier Healthcare Partners in 2023, and continues to expand its market-leading PCP-centric risk adjustment solution that health plans and providers actually use.

In 1999, Lifepoint Health began with a simple but powerful vision: to bring quality healthcare closer to home in communities that needed it most. Founded with 23 locations across nine states, the company recognized a critical gap in non-urban healthcare access and set out to fill it. What started as a network of community hospitals has evolved into a diversified healthcare delivery network spanning the entire care continuum - from acute care hospitals to rehabilitation and behavioral health facilities serving patients coast to coast. Today, Lifepoint Health stands as a national healthcare leader with 60 community hospital campuses, more than 70 rehabilitation and behavioral health hospitals, and over 300 additional sites of service across 33 states. The company's mission of 'making communities healthier'® drives every decision, from the cutting-edge technologies implemented through Lifepoint Forward to the rigorous quality standards upheld by the National Quality Program. With a culture built on core values like Champion Patient Care, Do the Right Thing, and Make a Difference Together, Lifepoint has created places where patients choose to come for care, physicians want to practice, and employees are proud to work.

Sword Health runs AI-augmented clinical care at scale across more than 1,000 enterprise clients on three continents, which means the attack surface spans protected health information, real-time treatment delivery systems, and predictive algorithms trained on sensitive patient data. The company pairs human clinicians with AI-powered digital care specialists to deliver physical therapy, chronic pain management, mental health support, and women's pelvic health services - infrastructure that demands authentication integrity, data residency compliance, and defenses against model poisoning or data exfiltration. The technical environment includes Python-based APIs (FastAPI, Django, Flask), event streaming via Apache Kafka, containerized workloads on Docker and Kubernetes, and multi-cloud deployments across AWS, Azure, and GCP. That spread introduces cross-cloud identity federation challenges, configuration drift risks, and the need to secure both SQL and NoSQL datastores holding clinical records. With 42 clinical studies and over 44 patents tied to proprietary algorithms, intellectual property protection and regulatory compliance (HIPAA, GDPR depending on geography) are operational requirements, not aspirations. Founded in 2015, the company reports 67% of members reaching pain-free status and a 50% reduction in surgeries among participants - outcomes that make the platform a high-value target for ransomware actors and healthcare fraud schemes. Security work here means hardening telehealth delivery paths, monitoring for anomalous data access patterns, and maintaining audit trails that satisfy both enterprise clients and regulators across jurisdictions.

HBF Health is Australia's second largest not-for-profit health fund, serving more than 1.2 million members nationwide with over A$2.3 billion in annual revenue. Founded more than 80 years ago in Perth, HBF has expanded from its Western Australian roots to become a trusted national health insurance provider, recognized as Australia's Most Trusted Health Insurer in 2022 and awarded Australia's Best Health Fund in 2023. The organization puts members first through its not-for-profit model, delivering quality, affordable hospital and extras cover while maintaining a 7.82% national market share as the country's fifth largest private health insurer. Beyond insurance, HBF has evolved into an active participant in health services through strategic acquisitions and partnerships. The company operates HBF Dental clinics, owns the Life Ready physiotherapy business, and maintains pharmacy partnerships with TerryWhite Chemmart outside WA and Pharmacy 777 within WA. HBF also launched Oracle Health Insurance in 2020 as part of its digital transformation initiative, demonstrating commitment to modernizing healthcare delivery. With approximately 1,000 employees across Australia, HBF continues to innovate its health programs and services, supporting member wellbeing through evidence-based programs for cardiovascular disease, osteoarthritis, diabetes, mental health, and weight management.

Versant Health operates vision benefits administration for over 35 million members nationwide through its Davis Vision and Superior Vision brands, handling claims processing, provider credentialing, and eyewear fulfillment at scale. The company processes member data across commercial insurance clients and government programs including Medicaid, Medicare Advantage, and CHIP - making it a critical node in healthcare infrastructure with regulatory obligations spanning HIPAA, HITRUST, PCI, and SOC compliance frameworks. As a MetLife subsidiary since 2021, it sits at the intersection of legacy health systems and enterprise financial services architecture. The threat surface is substantial: protected health information for tens of millions of members flows through systems managing clinical review processes, automated manufacturing operations in their eyewear lab, and a nationwide provider network. NCQA accreditation for utilization management signals adherence to evidence-based guidelines, but also means any compromise could impact care delivery decisions. The technical environment includes NIST-aligned controls and standard enterprise tooling, with security posture shaped by both healthcare sector requirements and MetLife's broader risk management framework. Founded in 2017 through a merger of two companies with combined industry history exceeding a century, Versant Health operates infrastructure built across multiple acquisition integrations - a common pattern that creates security complexity in identity management, data residency, and legacy system dependencies. The company's credentialing systems, claims adjudication platforms, and manufacturing automation represent attack vectors where disruption translates directly to member access and operational capacity.