Back Scworld

Craneware confirms customer and employee data exposed in security incident

Scworld • July 20, 2026

Scottish health tech company Craneware has confirmed that customer and employee data was exposed following a security incident. The company stated that its incident response plan was activated, and external cybersecurity and forensic specialists were appointed to investigate the breach, based on information published by IT Pro.

The breach, which occurred on July 20, saw a significant volume of file names viewed and exfiltrated by unauthorized individuals. While the company noted these files were not sensitive and were publicly available, a subset of customer and partner records, along with employee data, was also accessed and exfiltrated. Craneware has notified regulators, including the UK Information Commissioner’s Office (ICO), and law enforcement agencies like the FBI.

As a provider of accounting and billing software to approximately 2,000 US hospitals, Craneware is considered a prime target, offering cybercriminals a potential pathway into the healthcare supply chain. Experts warn that even seemingly low-risk stolen data can be used for phishing and social engineering attacks, urging employees, customers, and partners to remain vigilant against unsolicited communications and suspicious activity.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Craneware Cyberattack Exposes Employee and Customer Data Craneware plc, a healthcare software provider, reported a cyberattack on July 20, 2026, involving unauthorized access to its data environment. Investigations revealed that a significant volume of file names was viewed and exfiltrated, including employee data and some customer and partner records. The company stated that much of the accessed data is non-sensitive or already public regulatory information. Despite the breach, customer services and operations remained unaffected. Craneware activated its incident response plan and engaged external cybersecurity specialists to assist with the investigation. The company has notified relevant authorities, including the UK's Information Commissioner's Office and the US Federal Bureau of Investigation. Ongoing assessments aim to determine the full scope of the data involved and identify affected parties. 21 sources 58

Extracted Entities

Craneware confirms customer and employee data exposed in security incident

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (1)

MITRE ATT&CK (2)