Craneware Shares Drop Following Cybersecurity Breach Disclosure

Shares in Craneware plc (AIM: CRW.L), the Edinburgh-based healthcare financial performance software specialist, have dropped over 7% on Monday after the company disclosed a cybersecurity incident involving unauthorised access to part of its data environment.

In a statement issued on 20 July 2026, Craneware said it had identified the breach and activated its incident response plan, appointing external cybersecurity and forensic specialists to investigate alongside its internal IT team and retained security providers.

The company sought to reassure investors that the incident has been contained, with no disruption to customer services or ongoing operations. External specialists have reportedly confirmed there are no residual indicators of compromise remaining within Craneware’s systems.

WELCOME BONUS - Free Share Bundle When You Invest £50! Get up to £500 cashback for investing with IG.

Invest in 15,000+ shares and ETFs. Open an account now, invest at least £50, and you’ll get a free share bundle worth between £40 and £200. T&Cs apply.

5.0

Open Account Spread bets and CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. 68% of retail investor accounts lose money when trading spread bets and CFDs with this provider. You should consider whether you understand how spread bets and CFDs work, and whether you can afford to take the high risk of losing your money.

However, the disclosure that a “significant volume” of file names were viewed and exfiltrated appears to have unsettled the market. While Craneware maintains that much of the accessed data is non-sensitive or already publicly available regulatory information, the company confirmed that a percentage of employee data, along with a subset of customer and partner records, was also accessed and exfiltrated.

Craneware has notified relevant authorities, including the UK’s Information Commissioner’s Office and the US Federal Bureau of Investigation, and said law enforcement has also been informed.

The company is continuing to assess the full scope of the breach and is working with advisers to identify affected parties ahead of further notifications required under applicable regulations.

Investors, wary of potential reputational damage, regulatory penalties, and remediation costs, moved to reduce exposure, sending Craneware’s share price lower in early trading. The company said it will update the market as the investigation progresses.