Major data breach hits healthcare tech giant
Systems used by thousands of hospitals and pharmacies were hacked.
1Large-scale data theft
UK-based healthcare billing software company Craneware disclosed that a 'significant volume' of customer data was stolen from its systems. The company's software is used by thousands of US hospitals, clinics, and pharmacies. While hackers were reportedly expelled, investigations are ongoing regarding the breach's full scope.
2What data was compromised?
The company hasn't revealed the exact nature of stolen data but confirmed that portions of employee, customer, and partner records were exfiltrated. Craneware's systems manage patient records and billing processes for healthcare providers. Its 2021 acquisition of Sentry gave it access to 147 million patient records accumulated over two decades.
3Ransom demand uncertainty
Company officials haven't disclosed whether hackers made ransom demands. It's also unclear if email systems remain operational during the attack. CEO Keith Neilson hasn't responded to TechCrunch's inquiries. This incident follows a pattern of increasing cyberattacks targeting healthcare technology providers.
4Growing threat to healthcare sector
This breach joins recent US healthcare data incidents. In March, Trizetto reported theft of 3.4 million records. CareCloud and Episource experienced similar breaches. The 2024 Change Healthcare attack compromised 192 million records, affecting 'a substantial proportion of Americans,' per company statements.
5Sensitivity of patient data
Attacks on billing systems give hackers access to vast medical datasets. Threats of public exposure create leverage against companies. Records held by firms like Craneware contain sensitive health information alongside personal and financial data, making them prime targets for cybercriminals.
6Industry-wide alarm
The recent wave of attacks underscores urgent need for enhanced cybersecurity among healthcare technology vendors. These systems serving thousands of medical institutions house millions of sensitive records. Experts call for immediate upgrades to data protection standards across the sector.
Original article: TechCrunch — Sağlık teknolojisi devinden büyük veri ihlali