Health Tech Giant Craneware Rocked by Cyber Attack, Customer Data Stolen

Edinburgh-based health tech provider Craneware, whose software is vital to thousands of US hospitals, clinics, and pharmacies, announced today that it suffered a cyber attack resulting in the theft of customer and employee data. The company confirmed that unauthorized individuals accessed and copied a 'significant volume' of file names, along with a portion of staff information and records belonging to its customers and partners. While Craneware assures that the immediate breach has been contained and operations remain uninterrupted, the full impact is still being investigated. The firm's preliminary assessment suggests much of the stolen data might be non-sensitive or already publicly available regulatory information. However, this incident highlights a worrying trend where cybercriminals target central technology providers to access the broader, highly sensitive healthcare ecosystem, posing significant risks for the 2,000+ US hospitals and nearly 10,000 clinics and pharmacies Craneware serves. The news already saw Craneware shares drop sharply on the London Stock Exchange. Craneware has promptly alerted both the UK's Information Commissioner's Office and the US Federal Bureau of Investigation, with external cybersecurity and forensic specialists now deeply involved in the ongoing probe. The company is working to understand the exact nature and scope of all stolen data and will provide further updates as required by regulators. Customers and employees are urged to stay cautious of potential follow-up attacks like phishing, as the healthcare sector continues to be a prime target for cybercriminals aiming for valuable data.