Craneware Confirms Major Customer Data Theft Following Healthcare Cyberattack

Healthcare billing software provider Craneware has confirmed that hackers stole a significant volume of customer data during a cyberattack affecting its systems. The U.K.-based company said it has removed the attackers from its network, but investigations into the incident remain ongoing.

In a filing with the London Stock Exchange, Craneware said an undisclosed percentage of employee, customer and partner information had been exfiltrated. The company did not specify exactly what types of records were compromised or whether patient information was included in the stolen data.

Craneware provides accounting and medical billing software widely used across the United States.

Craneware provides accounting and medical billing software used by thousands of hospitals, clinics and pharmacies across the United States. Its platforms process large volumes of healthcare and billing information on behalf of medical providers. Following its 2021 acquisition of Florida-based pharmacy software company Sentry, Craneware also gained access to a database containing approximately 147 million patient records accumulated over two decades.

The company has not confirmed whether its email systems remain fully operational during the ongoing response. It said the investigation is continuing as security teams work to determine the full scope of the breach and the nature of the compromised data.

Latest in a series of healthcare technology breaches

The incident adds to a growing list of cyberattacks targeting technology vendors that serve the U.S. healthcare industry. Such companies often store sensitive medical and billing information for multiple healthcare organisations, making them attractive targets for cybercriminals seeking valuable data for extortion.

Several major healthcare technology firms have reported breaches over the past year. In March, TriZetto disclosed that hackers stole the personal and health information of more than 3.4 million people, while CareCloud reported an attack involving electronic health records. Earlier, medical billing provider Episource notified at least 5.4 million individuals that their data had been compromised. The largest healthcare breach on record remains the 2024 ransomware attack on Change Healthcare, which exposed the medical records of at least 192 million people across the United States.