Major data breach at healthcare tech giant
Systems used by thousands of hospitals and pharmacies hacked.
1Hackers infiltrate systems
UK-based healthcare billing software company Craneware announced that hackers infiltrated its systems and stole a significant amount of customer data. The company stated that the attackers have been removed but the investigation is ongoing. Craneware's software is used by thousands of hospitals, clinics, and pharmacies across the US.
2What data was stolen?
The company didn't specify exactly what data was taken but confirmed that portions of employee, customer, and partner records were compromised. Craneware processes patient records and billing data for healthcare providers. Through its 2021 acquisition of Sentry, it gained access to 147 million patient records.
3Healthcare sector in crosshairs
This attack is the latest in a series targeting tech companies serving the US healthcare sector. Hackers find these companies attractive targets due to the vast amounts of patient data they handle. Attackers can extort companies by threatening to release sensitive health information.
4Similar breaches in past year
Several major healthcare tech breaches have occurred recently. In March, TriZetto disclosed theft of 3.4 million people's data while CareCloud reported a breach of electronic health records. In July 2023, Episource notified 5.4 million individuals about their compromised information.
5Largest healthcare data breach in history
In 2024, a Russian-speaking ransomware group hacked UnitedHealth's Change Healthcare, stealing medical records of at least 192 million people. The company acknowledged this affected 'a substantial proportion of people in America.' This stands as the largest healthcare data breach in US history.
6Cybersecurity wake-up call
These consecutive large-scale breaches expose critical cybersecurity vulnerabilities in the healthcare sector. Protecting patient data is crucial for both individual privacy and healthcare system integrity. Companies must significantly increase their cybersecurity investments to prevent future attacks.
Original article: cybersecurity | TechCrunch — Sağlık teknolojisi devinden büyük veri ihlali