Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies

A cyberattack on Edinburgh-based software company Craneware resulted in the theft of customer data, according to a report monitored by Novexa News from a public feed. The company provides billing software used by thousands of hospitals, pharmacies and clinics across the United States, raising concerns that sensitive health-related information may have been exposed.

TechCrunch reported that Craneware said a “significant” amount of data was stolen in the incident. The feed summary did not specify exactly what types of information were taken, how many customers were affected, or whether patient records were among the compromised files. It also did not say when the attack occurred or whether the company has identified the attackers.

Craneware’s products are used in the healthcare payment process, which means the breach could have implications beyond the company itself if customer data includes information tied to billing operations. In the U.S. healthcare sector, billing systems can contain details connected to patients, providers, insurers and treatment records, depending on how the software is configured and used.

The incident adds to ongoing concern about cyberattacks targeting firms that sit behind critical healthcare functions. Even when a breach does not hit a hospital directly, compromise of a vendor can still affect institutions that depend on that vendor’s tools and services.

Novexa News is reporting this based on a monitored public feed, with attribution to TechCrunch’s coverage of the incident. No further verified details were provided in the summary.

Source: TechCrunch - https://techcrunch.com/2026/07/20/hackers-stole-significant-amount-of-data-from-tech-firm-relied-on-by-thousands-of-us-hospitals-and-pharmacies/