\n<\/p>\n
U.K.-based healthcare billing software maker Craneware is responding to a cyberattack in which hackers stole a \u201csignificant volume\u201d of customer data from its systems, the company said on Monday.<\/p>\n
The company said the hackers appear to have been expelled from its systems, but its investigation into the breach is ongoing, according to a statement filed with the London Stock Exchange<\/a>.<\/p>\n Craneware\u2019s flagship accounting and billing software is used by thousands of clinics, hospitals, and pharmacies across the United States. The company did not say exactly what kinds of data were taken in the breach, only noting that a \u201cpercentage\u201d of employee data, customer data, and partner records had been exfiltrated.<\/p>\n The company, whose software helps healthcare providers bill patients for services, handles large amounts of medical records and patient data on behalf of its customers. When it bought Florida-based pharmacy software maker Sentry in 2021, Craneware said it gained access<\/a> to the company\u2019s 147 million patient records that had been collected over two decades.<\/p>\n Craneware CEO Keith Neilson did not respond to TechCrunch\u2019s questions about the incident, or if the hackers have contacted the company with any demands, such as a ransom.\u00a0After publication, Craneware\u2019s chief growth officer Ian Armstrong said the company was still investigating, but did not comment on the incident further.<\/p>\n It\u2019s not yet clear if the company\u2019s systems can receive email amid the ongoing cyberattack.<\/p>\n While details of the hack are still under investigation, this is the latest data breach in recent months where hackers have targeted tech companies that supply tech and services to the U.S. healthcare sector. By compromising software that many healthcare providers use to analyze and understand their billing processes, hackers can access vast amounts of patient medical and health-related data, and extort the companies with threats of publicly releasing the information.<\/p>\n Craneware is the latest health tech giant to be breached in the past year.<\/p>\n In March, healthcare revenue tech firm TriZetto confirmed hackers stole more than 3.4 million people\u2019s personal and health data<\/a> from its systems during an earlier cyberattack. That very month, medical data storage giant CareCloud reported a breach of one of its stores of patients\u2019 electronic health records<\/a>, but has not yet said how much data was taken.\u00a0<\/p>\n Last July, medical billing company Episource began notifying at least 5.4 million people<\/a> that their information had been stolen by hackers.<\/p>\n The largest-ever breach of U.S. medical and healthcare data occurred in 2024, when a Russian-speaking ransomware gang hacked UnitedHealth-owned Change Healthcare. The hackers stole the medical and patient records of at least 192 million people<\/a>, which the company conceded affected a \u201csubstantial proportion of people in America.\u201d<\/p>\n Updated with a response from Craneware.<\/em><\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n