Craneware Hit by Cyber Attack Exfiltrating Customer and Employee Data

The Independent reported that Craneware, an Edinburgh-based healthcare technology firm, was hit by a cyber attack in which hackers stole some customer and employee data. Craneware provides accounting and billing software to the US healthcare industry through its cloud platform Trisus. It partners with around 2,000 hospitals and health systems and 10,000 clinics and pharmacies.

The company stated that a significant volume of file names were viewed and exfiltrated. “The current assessment is that a large element of the data involved is non-sensitive or already public regulatory data,” Craneware said. The incident has been contained and has not disrupted customer services or the company’s operations, nor are there signs of it compromising its systems, according to the firm and external specialists.

Craneware has notified the Information Commissioner’s Office in the UK and the Federal Bureau of Investigations in the US. It is working with advisers to establish the exact scope of the data involved. The business is based in Scotland and employs some 800 people globally.

Craneware is listed on London’s Alternative Investment Market.