Craneware Hit by Cybersecurity Incident Involving Unauthorized Data Access Craneware, a UK-based provider of healthcare financial performance solutions, has disclosed a cybersecurity incident involving unauthorized access to a portion of its data environment. The company, listed on the AIM market, activated its incident response plan, engaging external cybersecurity and forensic specialists to investigate alongside its internal IT team and retained security providers. The breach has been contained, with no disruption reported to customer services or operations. External specialists confirmed no lingering indicators of compromise in Craneware’s systems. The company has notified regulators and law enforcement, including the UK’s Information Commissioner’s Office (ICO) and the FBI in the U.S. Initial investigations reveal that a significant volume of file names were viewed and exfiltrated. While much of the accessed data is described as non-sensitive or already public regulatory information, the breach also impacted a subset of employee records, as well as customer and partner data. The full scope and impact of the incident remain under assessment.

Craneware Discloses Data Breach Following Unauthorized System Access On 20 July 2026, Craneware plc confirmed a data breach after detecting unauthorized access to its systems. The company, which provides healthcare revenue cycle and compliance software, activated its incident response plan and engaged external cybersecurity and forensic experts to investigate the incident. The breach, which has since been contained, did not disrupt customer services or business operations. Investigators found no remaining indicators of compromise within Craneware’s systems, though attackers viewed and exfiltrated a significant volume of file names. While much of the exposed data appears to be non-sensitive or publicly available regulatory information, the company confirmed that employee data and a subset of customer and partner records were also accessed and stolen. Craneware is working with advisers to determine the full scope of the breach, identify affected individuals and organizations, and prepare necessary notifications. The company has notified UK and US regulators, including the Information Commissioner’s Office (ICO) and the FBI, as part of its response. The investigation remains ongoing, with Craneware stating it will provide further updates as new details emerge. No additional disruptions to operations have been reported.