Craneware Says Hackers Stole Customer Data but Were Later Removed from Its Systems

Craneware disclosed on Monday that hackers had stolen a significant volume of customer data from its systems. -based company filed a statement with the London Stock Exchange stating that the intruders appear to have been removed, though its investigation remains ongoing. Craneware's accounting and billing software serves thousands of clinics, hospitals and pharmacies across the United States.

The company said a percentage of employee data, customer data and partner records had been taken. It handles large amounts of medical records and patient data for its clients. In 2021 Craneware acquired Florida-based Sentry and gained access to 147 million patient records collected over two decades.

Chief executive Keith Neilson did not respond to questions about the incident or any ransom demands. After publication, chief growth officer Ian Armstrong said the company was still investigating. It is not yet clear whether Craneware's systems can receive email during the ongoing incident.

The breach adds to a series of recent attacks on health-technology suppliers. In March, TriZetto confirmed that hackers stole personal and health data belonging to more than 3.4 million people. CareCloud also reported a breach of patient electronic health records that month.

Last July, Episource began notifying at least 5.4 million individuals that their information had been stolen. In 2024 a ransomware group breached UnitedHealth-owned Change Healthcare and took records affecting at least 192 million people, a substantial proportion of the U.S. population.