Health tech firm Craneware says customer and staff data stolen in cyber attack

July 20, 2026 - 10:31

Edinburgh-based health technology firm Craneware has confirmed that sensitive data belonging to its customers and staff was stolen in a recent cyber attack. The company, which provides financial and operational software to the US healthcare sector, serves thousands of hospitals, clinics, and pharmacies across America.

In a statement released to the stock market, Craneware said it detected unauthorized access to its systems and immediately launched an investigation with the help of external cybersecurity experts. The breach resulted in the theft of certain data files containing personal information of both clients and employees. The company did not specify the exact number of individuals affected or the nature of the stolen data, but it assured stakeholders that it has notified law enforcement and relevant regulatory authorities.

Craneware emphasized that its core software platforms remain operational and that the attack has not disrupted services for its healthcare clients. The firm is now working to strengthen its security infrastructure and has advised affected parties to remain vigilant against potential phishing or identity theft attempts. This incident adds to a growing list of cyber attacks targeting healthcare technology providers, raising renewed concerns about data security in the medical supply chain.