Craneware Hack Puts Data From Over 2,000 US Hospitals at Risk

UK healthcare financial and billing software provider Craneware plays a significant role in the US medical sector, helping hospitals and clinics manage revenue, costs and payment processes. A security breach at a vendor with access to operational and customer records can expose healthcare clients to broad data-protection, regulatory and supply-chain risks, even when clinical systems remain available.

Craneware said an unauthorized party accessed parts of its data environment and stole records relating to employees and customers. The company serves more than 2,000 US hospitals and nearly 10,000 clinics, raising the prospect of a wide impact across the healthcare industry. Craneware said operations and services had not been disrupted, the incident was contained, and investigators were continuing to determine which data and customers were affected.