Back Thisismoney

Hackers loot customer and staff data from healthcare technology firm Craneware

Thisismoney • July 20, 2026

Hackers have stolen customer and staff data from healthcare technology firm Craneware.

The Edinburgh-based company sells its accounting and billing software to the US healthcare system and is used by thousands of hospitals, clinics and pharmacies.

Craneware, which is listed on London’s Alternative Investment Market (AIM), said it was investigating and responding to the cyber attack.

The firm added that the incident has been contained and has not disrupted customer services or its operations.

Craneware confirmed it has alerted the Information Commissioner’s Office in the UK and the FBI, too.

Hacked: Craneware sells its accounting and billing software to the US healthcare system and is used by thousands of hospitals, clinics and pharmacies

Affiliate links: If you take out a product This is Money may earn a commission. These deals are chosen by our editorial team, as we think they are worth highlighting. This does not affect our editorial independence.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Craneware Cyberattack Exposes Employee and Customer Data Craneware plc, a healthcare software provider, reported a cyberattack on July 20, 2026, involving unauthorized access to its data environment. Investigations revealed that a significant volume of file names was viewed and exfiltrated, including employee data and some customer and partner records. The company stated that much of the accessed data is non-sensitive or already public regulatory information. Despite the breach, customer services and operations remained unaffected. Craneware activated its incident response plan and engaged external cybersecurity specialists to assist with the investigation. The company has notified relevant authorities, including the UK's Information Commissioner's Office and the US Federal Bureau of Investigation. Ongoing assessments aim to determine the full scope of the data involved and identify affected parties. 21 sources 58

Extracted Entities

Hackers loot customer and staff data from healthcare technology firm Craneware

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (1)