NHS Provider HCRG Care Group Suffers Cyber Attack, Patient Data Compromised

• •HCRG Care Group's cyber attack compromised sensitive patient data.
• •Patients were notified 15 months after the breach occurred in February 2025.
• •The care group claims there is no evidence of data misuse following the attack.

The HCRG Care Group, a healthcare provider in the UK, experienced a cyber attack that compromised patient data, including personal information such as names, addresses, and national insurance numbers. John Adams, a 69-year-old patient, expressed his frustration over the 15-month delay in notification about the breach, which occurred in February 2025. The care group attributed the delay to the complexity of the investigation and stated that there is currently no evidence of data misuse. HCRG Care Group, formerly Virgin Care, provides various health services across Bath and North East Somerset, Swindon, and Wiltshire. The organization has reported the incident to law enforcement and the Information Commissioner's Office. Patients are concerned about potential misuse of their data, particularly regarding financial security.