Craneware Data Breach Exposes Vulnerability in U.S. Healthcare Software Pipeline
AI-generated image · Bay Street Wire
The U.K.-based billing software provider reported a significant theft of customer and employee data, marking another major hit to the third-party vendors supporting American medical infrastructure.
Craneware, a U.K.-based provider of healthcare billing software used by thousands of U.S. hospitals, pharmacies, and clinics, is investigating a cyberattack that resulted in the theft of a “significant volume” of data, according to reporting from TechCrunch.
In a statement filed with the London Stock Exchange, the company confirmed that hackers exfiltrated a “percentage” of partner records, customer data, and employee data. While Craneware stated the intruders appear to have been expelled from its systems, the company has not specified the exact nature of the stolen data. Craneware's operations involve handling vast amounts of patient data; notably, the company acquired 147 million patient records when it purchased the Florida-based Sentry in 2021.
TechCrunch reported that Craneware CEO Keith Neilson did not respond to inquiries regarding the breach or potential ransom demands, and Chief Growth Officer Ian Armstrong declined to comment further beyond stating the investigation is ongoing.
This incident follows a pattern of attacks targeting the outsourced tech services that underpin the U.S. healthcare sector. TechCrunch notes several recent breaches: medical billing firm Episource notified at least 5.4 million people of stolen data last July; healthcare revenue firm TriZetto confirmed the theft of personal and health data from over 3.4 million people in March; and CareCloud reported a breach of electronic health records that same month. The most severe instance occurred in 2024, when a Russian-speaking ransomware group hacked UnitedHealth-owned Change Healthcare, stealing records from at least 192 million people.