A significant breach has been reported involving U.K.-based healthcare software firm Craneware, affecting thousands of clinics and hospitals in the U.S.

The company revealed that hackers accessed customer data through their billing software, used extensively across the country. Details on the exact nature of the stolen information remain scarce, but it is clear that a substantial amount of both employee and patient records have been compromised.

Craneware’s acquisition of Florida-based Sentry in 2021 brought with it a large trove of medical data—some 147 million patient records spanning two decades. This incident highlights the growing risk to health tech giants, as evidenced by similar breaches at TriZetto and CareCloud this year.

The scale of these attacks is staggering; one breach last July involved notifications for over five million people, while in 2024, a Russian-speaking gang breached Change Healthcare, stealing records from 192 million individuals. Such incidents underscore the urgent need for robust cybersecurity measures within the healthcare sector.