Personify Health

Sentara Health is a not-for-profit integrated healthcare system that's been serving communities for more than 125 years. What started in 1888 as a small hospital in Norfolk has grown into a network of over 300 sites of care across Virginia, North Carolina, and Florida. We operate 12 hospitals, and our team includes more than 1,600 physicians and advanced practice providers who complete over 2.8 million patient visits each year. Our mission is straightforward: we improve health every day. We're proud to be recognized as one of the nation's top health systems - IBM Watson Health named us among the "Top 15 Healthcare Systems," and we've consistently ranked at the top of U.S. News & World Report's best hospitals for over 18 years running. Eight of our hospitals have achieved Magnet Recognition Program® designation, the highest quality credential for nursing, awarded to fewer than 8% of hospitals nationwide. We combine state-of-the-art technology with expert multidisciplinary care teams to deliver quality outcomes, while constantly innovating to create new methods of care and measure our effectiveness.

Versant Health operates vision benefits administration for over 35 million members nationwide through its Davis Vision and Superior Vision brands, handling claims processing, provider credentialing, and eyewear fulfillment at scale. The company processes member data across commercial insurance clients and government programs including Medicaid, Medicare Advantage, and CHIP - making it a critical node in healthcare infrastructure with regulatory obligations spanning HIPAA, HITRUST, PCI, and SOC compliance frameworks. As a MetLife subsidiary since 2021, it sits at the intersection of legacy health systems and enterprise financial services architecture. The threat surface is substantial: protected health information for tens of millions of members flows through systems managing clinical review processes, automated manufacturing operations in their eyewear lab, and a nationwide provider network. NCQA accreditation for utilization management signals adherence to evidence-based guidelines, but also means any compromise could impact care delivery decisions. The technical environment includes NIST-aligned controls and standard enterprise tooling, with security posture shaped by both healthcare sector requirements and MetLife's broader risk management framework. Founded in 2017 through a merger of two companies with combined industry history exceeding a century, Versant Health operates infrastructure built across multiple acquisition integrations - a common pattern that creates security complexity in identity management, data residency, and legacy system dependencies. The company's credentialing systems, claims adjudication platforms, and manufacturing automation represent attack vectors where disruption translates directly to member access and operational capacity.

HBF Health is Australia's second largest not-for-profit health fund, serving more than 1.2 million members nationwide with over A$2.3 billion in annual revenue. Founded more than 80 years ago in Perth, HBF has expanded from its Western Australian roots to become a trusted national health insurance provider, recognized as Australia's Most Trusted Health Insurer in 2022 and awarded Australia's Best Health Fund in 2023. The organization puts members first through its not-for-profit model, delivering quality, affordable hospital and extras cover while maintaining a 7.82% national market share as the country's fifth largest private health insurer. Beyond insurance, HBF has evolved into an active participant in health services through strategic acquisitions and partnerships. The company operates HBF Dental clinics, owns the Life Ready physiotherapy business, and maintains pharmacy partnerships with TerryWhite Chemmart outside WA and Pharmacy 777 within WA. HBF also launched Oracle Health Insurance in 2020 as part of its digital transformation initiative, demonstrating commitment to modernizing healthcare delivery. With approximately 1,000 employees across Australia, HBF continues to innovate its health programs and services, supporting member wellbeing through evidence-based programs for cardiovascular disease, osteoarthritis, diabetes, mental health, and weight management.

HealthEquity administers Health Savings Accounts and consumer-directed benefits for millions of Americans navigating healthcare finance - a domain where regulatory complexity meets high-stakes personal data. As an IRS-designated non-bank HSA trustee, the company operates at the intersection of financial technology and benefits administration, processing healthcare dollars through systems that must satisfy both HIPAA requirements and financial services compliance. The attack surface spans account management platforms, employer integrations, and financial advisor portals. The technical stack centers on Workday for HR and benefits operations, with Salesforce handling customer relationship management. Security teams work across fintech threat models - account takeover, payment fraud, credential stuffing - layered with healthcare-specific risks around protected health information. The company manages FSAs, HRAs, and COBRA alongside its core HSA product, creating multiple data flows between employers, financial institutions, and individual account holders. Operations run entirely within the United States under federal healthcare and financial regulations. The threat model includes both external attackers targeting financial accounts and insider risk from employees accessing sensitive health and financial data across enterprise clients. Security architecture must account for partner integrations with employers and financial advisors, where weak links in third-party systems can expose HealthEquity's infrastructure. The scale of the operation - positioned as a leading HSA administrator - means compromise scenarios affect working Americans' healthcare savings and medical expense records simultaneously.

OU Health operates Oklahoma's only comprehensive academic health system, serving patients across all 77 counties through a distributed network of hospitals, clinics, and specialized treatment centers. With more than 10,000 team members - including 1,300 physicians and 4,000 nurses - the organization functions as the flagship academic health system of The University of Oklahoma, integrating direct patient care with medical education and clinical research. The infrastructure includes Oklahoma Children's Hospital, the Stephenson Cancer Center (one of only 73 NCI-Designated Cancer Centers nationally), the Harold Hamm Diabetes Center, and a Level I trauma center that has anchored emergency care in the state for three decades. The organization's operational footprint extends from Oklahoma City and Edmond to Tulsa and points beyond, delivering complex, life-saving treatments that range from pediatric heart transplants to advanced oncology protocols. The clinical environment combines acute trauma response, specialized pediatric services, diabetes management, and cancer treatment under a single institutional umbrella. This structure creates a threat surface that spans emergency department systems, research data repositories, pediatric patient records, transplant coordination networks, and the interconnected clinical systems that support continuous care across multiple counties. For security practitioners, OU Health represents the operational complexity of a large-scale academic medical center: protecting high-value research data, maintaining uptime for life-critical systems, ensuring HIPAA compliance across geographically distributed care sites, and securing the digital infrastructure that supports both routine outpatient visits and emergency trauma operations. The scale - measured in thousands of clinical staff, tens of thousands of patients, and statewide geographic reach - translates to challenging identity management, network segmentation, medical device security, and incident response coordination across entities that include teaching hospitals, research facilities, and community clinics operating under unified governance.

In 1999, Lifepoint Health began with a simple but powerful vision: to bring quality healthcare closer to home in communities that needed it most. Founded with 23 locations across nine states, the company recognized a critical gap in non-urban healthcare access and set out to fill it. What started as a network of community hospitals has evolved into a diversified healthcare delivery network spanning the entire care continuum - from acute care hospitals to rehabilitation and behavioral health facilities serving patients coast to coast. Today, Lifepoint Health stands as a national healthcare leader with 60 community hospital campuses, more than 70 rehabilitation and behavioral health hospitals, and over 300 additional sites of service across 33 states. The company's mission of 'making communities healthier'® drives every decision, from the cutting-edge technologies implemented through Lifepoint Forward to the rigorous quality standards upheld by the National Quality Program. With a culture built on core values like Champion Patient Care, Do the Right Thing, and Make a Difference Together, Lifepoint has created places where patients choose to come for care, physicians want to practice, and employees are proud to work.