Comparison Overview

Central Indiana Orthopedics

VS

Hamad Medical Corporation

Central Indiana Orthopedics

3600 W Bethel Ave, None, Muncie, IN, US, 47304
Last Update: 2025-12-25
Between 650 and 699

In 1950, Leland Brown, MD, and Jack Walker, MD, opened an orthopedic medicine office in downtown Muncie, Indiana. At that time, the polio epidemic was in full swing, and the doctors were very busy. Although the number of cases decreased with the Salk vaccine, the orthopedic practice remained and treated some of the less complicated problems. As the office grew, Drs. Brown and Walker invited other orthopedic surgeons to join them in practice. In the 1970's the group started treating more athletes with injuries and began their professional relationship with Ball State University. The individual physicians adopted the name Central Indiana Orthopedics in 1987, and just a few years later opened its second office, located in Anderson. In 2000, the physicians of Mid America Orthopedics joined the Central Indiana Orthopedic Group. This meant there were 3 offices in Anderson at that time, so needing more space for all offices to be under one roof, Central Indiana Orthopedics Anderson office moved into the Ambulatory building across from St. John's Hospital. Currently Central Indiana Orthopedics consists of 25+ physicians (orthopedic surgeons, primary care sports medicine, physiatry, and neurosurgery), 30+ additional providers (physician assistants, nurse practitioners and physical therapists), and over 200 employees make up our TEAM. Central Indiana Orthopedics provides musculoskeletal care in our Fishers, Anderson, Muncie and Marion facilities as well as our satellite locations in Elwood and Winchester.

NAICS: 621
NAICS Definition: Ambulatory Health Care Services
Employees: 144
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
2

Hamad Medical Corporation

PO Box 3488, Doha, QA
Last Update: 2025-12-25
Between 750 and 799

Hamad Medical Corporation (HMC) is the main provider of secondary and tertiary healthcare in Qatar and one of the leading hospital providers in the Middle East. For more than three decades, HMC has been dedicated to delivering the safest, most effective and compassionate care to all its patients. HMC manages twelve hospitals – nine specialist hospitals and three community hospitals – as well as the National Ambulance Service and home and residential care services. In January 2016, HMC achieved the significant distinction of becoming the first healthcare system across the globe to have all its hospitals accredited by Joint Commission International under the Academic Medical Center accreditation program. Additionally, the National Ambulance Service, Home Healthcare Service, Stroke Service and Palliative Care, have all received this prestigious accreditation since 2011. To meet the needs of a rapidly growing population, HMC has announced ambitious plans to expand capacity across its network through to 2030. HMC is leading the development of the region’s first academic health system – combining innovative research, top-class education and excellent clinical care – and is committed to building a legacy of healthcare expertise in Qatar. HMC collaborates with key partners who are experts in Qatar and beyond, including Weill Cornell Medical College-Qatar, the Institute for Healthcare Improvement and Partners Healthcare, Boston. HMC is also the first hospital system in the Middle East to achieve institutional accreditation from the Accreditation Council of Graduate Medical Education – International (ACGME-I), which demonstrates excellence in the way medical graduates are trained through residency, internship and fellowship programs. For more information about working at HMC, please visit www.hmc.org.qa/en/employees_careers/employees_careers.aspx

NAICS: 621
NAICS Definition: Ambulatory Health Care Services
Employees: 19,214
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/central-indiana-orthopedics.jpeg
Central Indiana Orthopedics
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/hamad-medical-corporation.jpeg
Hamad Medical Corporation
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Central Indiana Orthopedics
100%
Compliance Rate
0/4 Standards Verified
Hamad Medical Corporation
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Medical Practices Industry Average (This Year)

No incidents recorded for Central Indiana Orthopedics in 2025.

Incidents vs Medical Practices Industry Average (This Year)

No incidents recorded for Hamad Medical Corporation in 2025.

Incident History — Central Indiana Orthopedics (X = Date, Y = Severity)

Central Indiana Orthopedics cyber incidents detection timeline including parent company and subsidiaries

Incident History — Hamad Medical Corporation (X = Date, Y = Severity)

Hamad Medical Corporation cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/central-indiana-orthopedics.jpeg
Central Indiana Orthopedics
Incidents

Date Detected: 11/2021
Type:Breach
Attack Vector: External Hacking
Blog: Blog

Date Detected: 10/2021
Type:Ransomware
Motivation: Financial gain
Blog: Blog
https://images.rankiteo.com/companyimages/hamad-medical-corporation.jpeg
Hamad Medical Corporation
Incidents

No Incident

FAQ

Hamad Medical Corporation company demonstrates a stronger AI Cybersecurity Score compared to Central Indiana Orthopedics company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Central Indiana Orthopedics company has historically faced a number of disclosed cyber incidents, whereas Hamad Medical Corporation company has not reported any.

In the current year, Hamad Medical Corporation company and Central Indiana Orthopedics company have not reported any cyber incidents.

Central Indiana Orthopedics company has confirmed experiencing a ransomware attack, while Hamad Medical Corporation company has not reported such incidents publicly.

Central Indiana Orthopedics company has disclosed at least one data breach, while the other Hamad Medical Corporation company has not reported such incidents publicly.

Neither Hamad Medical Corporation company nor Central Indiana Orthopedics company has reported experiencing targeted cyberattacks publicly.

Neither Central Indiana Orthopedics company nor Hamad Medical Corporation company has reported experiencing or disclosing vulnerabilities publicly.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Central Indiana Orthopedics company nor Hamad Medical Corporation company has publicly disclosed detailed information about the number of their subsidiaries.

Hamad Medical Corporation company employs more people globally than Central Indiana Orthopedics company, reflecting its scale as a Medical Practices.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds SOC 2 Type 1 certification.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds SOC 2 Type 2 certification.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds ISO 27001 certification.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds PCI DSS certification.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds HIPAA certification.

Neither Central Indiana Orthopedics nor Hamad Medical Corporation holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Description

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious .bin or .pt model file. This issue has been patched in version 0.11.1.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Description

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N