Last week, U.K. based healthcare billing software provider Craneware announced that it had been impacted by a serious cybersecurity event, indicating that a significant amount of customer and employee data has been compromised. As healthcare billing often entails sensitive patient and medical data, this is a critical event that indicates a broader and ongoing trend across the industry.
In fact, healthcare is undergoing one of the most severe cybersecurity crisis periods in the history of the industry. Medical billing software companies and developers seem to be especially targeted in recent years, as hackers are realizing that these companies are often the gateways to numerous hospitals across the globe. Additionally, these targets often contain the most amount of high yield, concentrated datasets, making the threats even more serious and therefore, worthy of higher ransom collection threats.
By no means is Craneware alone in this tragedy; other billing companies, such as TriZetto, CareCloud and Episource, have undergone similar breaches over the last year, indicative of a broader industry calamity.
According to Becker’s and per the Identify Theft Resource Center, healthcare data breaches climbed to 281 in just the first half of 2026; the number is second only to the financial services industry, which had 387 encounters in the same time period. Per the report, “the healthcare figures come inside a record-setting national picture. The U.S. recorded 1,803 total data compromises across all sectors in the first half of 2026, affecting an estimated 471.2 million individuals — a total that already exceeds all of 2025’s 297.5 million victim notices in just six months.”
Per the HIPAA Journal, there has been a significant uptick in the number of data breaches in healthcare since 2009. The report also highlights the largest confirmed healthcare data breaches of all time, with some events impacting more than 190 million individuals.
Why is all of this important?
For one, health data and medical records are among the most sensitive aspects of an individual’s identity. They often contain more than just diagnoses and illnesses, but frequently entail detailed social histories, family information and other sensitive identifying information that could make individuals incredibly vulnerable. A loss of privacy over this information is monumental.
Additionally, healthcare breaches are incredibly disruptive to care systems. A JMIR article found that “hospitals’ breach responses increase the financial burden on hospitals. The efforts to repair the damages from a data breach increase direct and indirect costs and may divert resources from improving patient quality of care.”
Organizations are equally concerned with these impacts, and are especially worried as the reliance on more integrated data systems and artificial intelligence is growing. More technology also means increased vulnerability to potential breaches, and healthcare leaders are aware that they need to invest heavily in cyber protection measures. Hackers are also becoming more sophisticated in their approach; beyond just targeting large systems or back-office service providers, they are also targeting vulnerable patient populations for identify theft or other cyber incursions.
Indeed, as the rate of these cyber events in healthcare is rapidly increasing, technology and healthcare leaders alike must come together to find sustainable and long-term solutions.
