Health tech firm Craneware says customer and staff data stolen in cyber attack

Health technology firm Craneware said it was hit by a cyber attack in which hackers stole some customer and employee data. The Edinburgh-based company provides healthcare software to the US, serving thousands of hospitals, clinics and pharmacies, and is listed on London’s Alternative Investment Market (AIM). Craneware said a significant volume of file names was viewed and exfiltrated, and its initial assessment indicates much of the data may be non-sensitive or already public regulatory information. It added that a percentage of employee data and a subset of customer and partner records were accessed and removed. The company said the incident was contained and did not disrupt customer services or its operations, and it has notified the UK Information Commissioner’s Office and the US Federal Bureau of Investigation. It also said it is working with advisers to confirm the data scope.