Hackers Exfiltrate Data from Craneware's Systems

Craneware, a U.K.-based healthcare billing software maker, has been hit by a significant cyberattack.

According to a statement filed with the London Stock Exchange, hackers have stolen a substantial volume of customer data from Craneware's systems. Although the company claims to have expelled the hackers, the investigation into the breach is ongoing.

Craneware's flagship accounting and billing software is used by thousands of clinics, hospitals, and pharmacies across the United States. The company's systems handle large amounts of medical records and patient data on behalf of its customers. It's unclear what types of data were taken in the breach, but a "percentage" of employee data, customer data, and partner records were compromised.

The breach is the latest in a string of high-profile attacks targeting tech companies that supply services to the U.S. healthcare sector. By compromising software used by healthcare providers, hackers can access vast amounts of patient medical and health-related data, and extort the companies with threats of publicly releasing the information.

Recent breaches in the healthcare sector have seen hackers target companies like TriZetto, CareCloud, and Episource, among others.

Craneware is the latest health tech giant to be breached in the past year. In March, TriZetto confirmed hackers stole more than 3.4 million people's personal and health data from its systems. CareCloud reported a breach of one of its stores of patients' electronic health records, but has not yet disclosed the extent of the data taken.

The largest ever breach of U.S. medical and healthcare data occurred in 2024, when a Russian-speaking ransomware gang hacked UnitedHealth-owned Change Healthcare, stealing the medical and patient records of at least 192 million people.

Craneware's CEO, Keith Neilson, has not commented on the incident or whether the hackers have made any demands, such as a ransom. The company has not disclosed whether its systems can receive email amid the ongoing cyberattack.

As the healthcare sector continues to face the threat of cyberattacks, companies must take proactive measures to protect their systems and patient data.

"The healthcare sector is a prime target for hackers, and companies must take proactive steps to protect their systems and patient data," said a security expert.

• The investigation into the breach is ongoing.
• The types of data stolen in the breach are unclear.
• Craneware's CEO has not commented on the incident.
• The company has not disclosed whether its systems can receive email amid the cyberattack.