Craneware Discloses Data Breach Following Unauthorized System Access On 20 July 2026, Craneware plc confirmed a data breach after detecting unauthorized access to its systems. The company, which provides healthcare revenue cycle and compliance software, activated its incident response plan and engaged external cybersecurity and forensic experts to investigate the incident. The breach, which has since been contained, did not disrupt customer services or business operations. Investigators found no remaining indicators of compromise within Craneware’s systems, though attackers viewed and exfiltrated a significant volume of file names. While much of the exposed data appears to be non-sensitive or publicly available regulatory information, the company confirmed that employee data and a subset of customer and partner records were also accessed and stolen. Craneware is working with advisers to determine the full scope of the breach, identify affected individuals and organizations, and prepare necessary notifications. The company has notified UK and US regulators, including the Information Commissioner’s Office (ICO) and the FBI, as part of its response. The investigation remains ongoing, with Craneware stating it will provide further updates as new details emerge. No additional disruptions to operations have been reported.