Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies

U.K.-based healthcare billing bundle shaper Craneware is responding to a cyberattack successful which hackers stole a “significant volume” of lawsuit information from its systems, the institution said connected Monday.

The institution said the hackers look to person been expelled from its systems, but its probe into the breach is ongoing, according to a connection filed with the London Stock Exchange.

Craneware’s flagship accounting and billing bundle is utilized by thousands of clinics, hospitals, and pharmacies crossed the United States. The institution did not accidental precisely what kinds of information were taken successful the breach, lone noting that a “percentage” of worker data, lawsuit data, and spouse records had been exfiltrated.

The company, whose bundle helps healthcare providers measure patients for services, handles ample amounts of aesculapian records and diligent information connected behalf of its customers. When it bought Florida-based pharmacy bundle shaper Sentry successful 2021, Craneware said it gained access to the company’s 147 cardinal diligent records that had been collected implicit 2 decades.

Craneware CEO Keith Neilson did not instantly respond to TechCrunch’s questions astir the incident, oregon if the hackers person contacted the institution with immoderate demands, specified arsenic a ransom. 

It’s not yet wide if the company’s systems tin person email amid the ongoing cyberattack.

While details of the hack are inactive nether investigation, this is the latest information breach successful caller months wherever hackers person targeted tech companies that proviso tech and services to the U.S. healthcare sector. By compromising bundle that galore healthcare providers usage to analyse and recognize their billing processes, hackers tin entree immense amounts of diligent aesculapian and health-related data, and extort the companies with threats of publically releasing the information.

Craneware is the latest wellness tech elephantine to beryllium breached successful the past year.

In March, healthcare gross tech steadfast TriZetto confirmed hackers stole more than 3.4 cardinal people’s idiosyncratic and wellness data from its systems during an earlier cyberattack. That precise month, aesculapian information retention elephantine CareCloud reported a breach of 1 of its stores of patients’ physics wellness records, but has not yet said however overmuch information was taken. 

Last July, aesculapian billing institution Episource began notifying astatine slightest 5.4 cardinal people that their accusation had been stolen by hackers.

The largest ever breach of U.S. aesculapian and healthcare information occurred successful 2024, erstwhile a Russian-speaking ransomware pack hacked UnitedHealth-owned Change Healthcare. The hackers stole the aesculapian and diligent records of astatine slightest 192 cardinal people, which the institution conceded affected a “substantial proportionality of radical successful America.”