Meanwhile, patient harm figures revealed in January 2025, show that a ransomware attack on NHS pathology provider Synnovis in June 2024 led to at least two cases of severe patient harm, 11 cases of moderate harm, and more than 120 cases of low harm.
NHS private service provider, the HCRG Care Group, has confirmed that it is investigating a suspected ransomware attack.
The group, previously known as Virgin Care, runs child and family health and social services for the NHS and local authorities.
HCRG Care Group said in a statement that it is looking into claims made by a cyber crime group that it has breached sensitive information.
A spokesperson for HCRG group said: “We can confirm that we are currently investigating an IT security incident and have recently identified a post on the dark web by a group claiming responsibility.
“Our team has not observed any suspicious activity since the implementation of immediate containment measures, and we are working with external forensic specialists to investigate the incident.
“Our services are continuing to operate and safely see patients, and those with appointments or who need to access our services should continue to do so.”
They added that the Information Commissioner and regulators had been informed about the suspected attack.
Bath and North East Somerset and Wiltshire SW Integrated Care Board (BSW ICB) announced in October 2024 that it had awarded a £1.3bn contract to HCRG to provide all adult community health services across the region.
It said the the HCRG Care Group had been appointed to “lead an innovative new community-based care partnership with the NHS, local authorities and charities that will transform the care and support that people get to help them with their health and wellbeing at every stage of their lives.”
HCRG Care Group operated its first NHS service in the area in 2006, and has since delivered more than 200 community services, while employing more than 1,300 NHS staff.
Digital Health News contacted BSW Integrated Care Board for comment.
Meanwhile, patient harm figures revealed in January 2025, show that a ransomware attack on NHS pathology provider Synnovis in June 2024 led to at least two cases of severe patient harm, 11 cases of moderate harm, and more than 120 cases of low harm.
The HCRG Care Group, a private service provider for the NHS, is currently investigating a suspected ransomware attack. This group, formerly known as Virgin Care, operates child and family health and social services for the NHS and local authorities.
In a statement, the HCRG Care Group mentioned that they are looking into claims made by a cyber crime group regarding a breach of sensitive information. They have implemented immediate containment measures and are working with external forensic specialists to investigate the incident. Despite this, their services are still operational and patients with appointments should continue to access their services.
The Information Commissioner and regulators have been notified about the suspected attack. In October 2024, the Bath and North East Somerset and Wiltshire SW Integrated Care Board awarded a £1.3bn contract to HCRG to provide all adult community health services in the region. This partnership aims to transform care and support for individuals at every stage of their lives.
HCRG Care Group has been providing NHS services since 2006 and has delivered over 200 community services while employing more than 1,300 NHS staff. Digital Health News reached out to BSW Integrated Care Board for comment.
In related news, patient harm figures from January 2025 revealed that a ransomware attack on NHS pathology provider Synnovis in June 2024 resulted in at least two cases of severe patient harm, 11 cases of moderate harm, and over 120 cases of low harm.
