It has been a mixed 24 hours in business IT: a vendor breach touching thousands of hospitals, a notable identity security acquisition in the MSP channel, fresh data on small business AI adoption, and a Microsoft price hike finally landing on invoices. Here are the five stories that matter most if you are running a small or midsize business, or leading its IT.

A billing software breach at a vendor serving thousands of hospitals is a reminder that vendor risk is your risk. Edinburgh based Craneware, whose billing and pharmacy software is used by more than 2,000 U.S. hospitals and nearly 10,000 clinics and retail pharmacies, disclosed that hackers stole a portion of its employee, customer, and partner data before being expelled from its systems. The company says much of what was taken is non sensitive or already public information, and it has notified the FBI and UK’s Information Commissioner’s Office while its investigation continues. When you hand core operations like billing to a specialized vendor, your risk exposure follows their security posture, not just your own, so it is worth asking any vendor holding sensitive data for your business what breach notification commitments they have actually made to you, before you need the answer. Read more at TechCrunch

Barracuda’s acquisition of Evo Security folds identity protection into the same stack as your email and network security. Barracuda Networks acquired Evo Security, adding multi tenant identity and privileged access management, including MFA, single sign on, and technician elevation controls, into its BarracudaONE platform, tying identity protection together with the email, network, and endpoint security Barracuda already sells through its partner network. If the business you outsource IT to runs on Barracuda’s platform, this means the login protection guarding your accounts now lives in the same system as your email and network security instead of a separate bolted on tool, and since compromised credentials remain the leading way ransomware gangs get in the door, it is worth asking your provider whether those added privileged access controls are actually turned on for your account, not just available. Read more at ChannelE2E

New survey data shows two thirds of small businesses now use AI, but most say they still need training to use it well. Thryv’s 2026 survey found AI adoption among U.S. small businesses climbed to 66 percent, up from 55 percent a year ago, with a third of owners now spending more on AI tools than they were twelve months ago, and most who use AI reporting real gains in revenue or measurable monthly savings. Still, 70 percent said they need more training to use the tools effectively, and that gap is the part that actually determines whether you get anything back for the spend. If you added an AI tool to your business this year, it is worth an honest look at whether your team knows how to use it well or whether it is sitting half configured, because that is where most of the wasted money hides. Read more at Yahoo Finance

Microsoft 365 prices went up July 1, some plans by a third, and it is worth checking your invoice against what you actually use. Microsoft’s commercial 365 pricing changed on July 1, with increases ranging from 5 to 33 percent depending on plan. Business Premium held steady at $22 per user per month, the only business tier suite spared an increase, while Frontline plans took the biggest hit, with F1 rising from $2.25 to $3.00 and F3 from $8.00 to $10.00. Microsoft says the increases fund added security capabilities like Defender for Office 365 and expanded management tools. With Business Premium untouched and Google Workspace’s Business Standard now priced identically to Microsoft’s equivalent plan, this is a good week to make sure you are paying for the tier that actually fits how your team works, not one that is heavier or lighter than what you need. Read more at Red River

The EU is forcing Google to open Android’s AI assistant to rivals, and it is worth watching even if you are a US business. Under the Digital Markets Act, the European Commission issued guidance requiring Google to let competing AI assistants integrate with Android at the same level as Gemini, including voice activation and cross app access, and to share portions of search data with rivals starting in January, and Google has run out of legal room to delay compliance. This ruling is European, but it will likely reshape which AI assistants can compete for deep access to Android devices over the next year, so if your business standardizes on Android hardware or is still choosing which AI assistant to build workflows around, more competition in that market is likely to mean more options and better pricing for you down the road, not fewer. Read more at Tech Times

Sponsored by Lucky 13 Solutions

Business in Motion. Tech in Sync. Lucky 13 Solutions is a managed services provider helping small and midsize businesses keep their IT reliable, secure, and well-supported, without needing a full in-house team. Learn more at l13s.com.

Get the Business IT News Roundup in your inbox: