Healthcare Billing Company Breach May Expose Your Medical Records

A Scottish technology company called Craneware suffered a cyberattack that resulted in a significant amount of customer data being stolen. Craneware makes billing software used by thousands of U.S. hospitals, pharmacies, and clinics. Because the company handles billing operations, the stolen data could include sensitive health information linked to patient treatments and medications.

If you have visited a hospital, clinic, or pharmacy in the U.S., your information might be affected. The breach potentially exposed health data because billing records contain details about what treatments you received, what medications you take, and your insurance information. Craneware has not revealed which specific hospitals and pharmacies use their software, making it difficult to know for certain if your data was involved.

Here is what you should do right now:

1. Contact your hospital, pharmacy, and health insurance company. Ask if they use Craneware software and whether they have been notified of any breach affecting patient data.
2. Review your medical bills and insurance statements carefully. Look for any charges you do not recognize or treatments you did not receive.
3. Check your credit reports for free at AnnualCreditReport.com. Medical identity theft can result in fraudulent accounts opened in your name.
4. Consider placing a fraud alert on your credit file by contacting one of the three credit bureaus (Equifax, Experian, or TransUnion).
5. Watch for phishing attempts. Criminals may use stolen health information to send convincing scam emails or phone calls. Healthcare data breaches are particularly serious because medical information can be used for identity theft and insurance fraud. Unlike credit card numbers that can be changed, your medical history and Social Security number are permanent. Stay vigilant about monitoring your medical and financial records. If you receive unexpected medical bills or explanation of benefits statements for services you did not receive, report them immediately to your insurance company and healthcare provider.