Craneware Cyberattack Exposes Employee and US Healthcare Customer Data

Craneware plc disclosed a cyberattack involving unauthorized access and exfiltration of files from parts of its systems; preliminary findings indicate file names and a mix of non-sensitive regulatory data along with some employee and customer/partner records tied to its Trisus healthcare platform. The company says the incident is contained, external forensic specialists were engaged, regulators and law enforcement notified, and an investigation is ongoing to determine the exact scope and whether protected health information or other sensitive data were exposed — underscoring third-party risk for healthcare customers.