Midwest Orthopaedic Consultants

Midwest Orthopaedic Consultants, also known as MOC, is a healthcare organisation that provides orthopaedic consulting services. The organisation focuses on the diagnosis, treatment, and management of musculoskeletal conditions and injuries. It serves patients primarily in the Midwestern United States, consistent with its name and headquarters location. As part of its clinical operations, MOC collects and maintains protected health information including patient names, dates of birth, diagnosis and treatment details, addresses, Social Security numbers, driver’s license data, and health insurance information. This data handling necessitates compliance with federal health privacy regulations such as HIPAA.

In December 2022, MOC experienced a security incident involving unauthorized network access that resulted in the encryption of files and the potential exposure of the aforementioned personal and health data for 6,818 individuals. The organisation responded by restoring affected systems from backups, notifying the impacted individuals, and offering identity theft protection services. MOC publicly apologized for the breach and indicated that it was strengthening its technical security measures to prevent similar incidents in the future. The incident highlights the organisation’s responsibility to safeguard sensitive patient information amid increasing cyber threats to healthcare providers. While specific details about ownership, parent entities, or organisational size are not disclosed in the available sources, MOC operates as an independent orthopaedic consulting practice within the United States healthcare sector.