Craneware Confirms Data Theft After Cyberattack, Investigations Underway

*Craneware, a UK-based healthcare software vendor, disclosed an incident in which threat actors gained unauthorized access to part of its network and exfiltrated a significant volume of file names; services remained operational and the company reports the attack has been contained but investigations by UK and US authorities are ongoing. The report provides few technical details (no confirmed patient data compromise, no identified initial access vector or attacker), and emphasizes the broader risk of vendor-focused attacks in the healthcare supply chain, urging reassessment of vendor security and oversight.*