Edinburgh-based tech firm Craneware said customer data was stolen during a cyberattack. The company makes software that thousands of U.S. hospitals, pharmacies, and clinics rely on for billing patients, potentially exposing health data.

Employee data as well as a subset of customer and partner records have been accessed in the cyberattack, the company said

The Edinburgh-based company provides software to the US healthcare industry, including thousands of hospitals, clinics and pharmacies.