Craneware Group Data Breach Potentially Impacts Employee and Customer Data

The Craneware Group, a healthcare software company headquartered in Edinburgh, Scotland, has disclosed a cybersecurity incident involving unauthorized access to part of its data environment.

The Craneware Group identified a cybersecurity incident involving unauthorized access to a subset of its data environment. The notice did not specify the exact dates when the unauthorized access took place or how the attackers initially gained entry to the company's systems.

The Craneware Group's internal reviews established that data was viewed and exfiltrated during the incident.

The company develops cloud-based financial and operational software for hospitals, health systems, clinics and retail pharmacies, and its platform handles data related to revenue integrity, financial performance, charge capture, claims analytics and pharmacy program management.

Because of their work, the company's systems may contain various types of information connected to healthcare organizations and the individuals they serve. At this time, however, the specific types of personal information that was exposed have not been publicly disclosed at this time.

The company disclosed the incident in a regulatory notice posted on the London Stock Exchange on July 20, 2026. The total number of people affected in the United States or elsewhere has not been disclosed.

The Craneware Group's response to the breach

The Craneware Group is working to identify and notify individuals whose personal data may have been involved, in line with its regulatory obligations. Because the company is still in the process of identifying affected individuals, notifications to consumers have not yet been completed.

Individuals with questions about the incident can reach the company by phone at +44-131-550-3100 or by email at craneware@craneware.com. The company stated in its notice that it will update the market as appropriate.