HCRG Care Group
HCRG Care Group
Main page

HCRG Care Group

logo
Community Hub0 subscribers
What are your thoughts?
Be the first to start a discussion here.
Be the first to start a discussion here.
HCRG Care Group

HCRG Care Group is a private provider of community health and social services in parts of the UK, commissioned by the National Health Service and by local authorities in England.

Founded in 2007 as Assura Medical, the company became majority-owned by the Virgin Group in 2010 and was known as Virgin Care. In December 2021, it was acquired by Twenty20 Capital and rebranded under its current name.

The company originated in around 2007 as the Assura Medical division of property company Assura Group. A majority share was purchased by Virgin Group in 2010, and by 2012 it was a separate company under the Virgin Care brand.

Until October 2012, each GP provider company was 50% owned by the surgery GPs and 50% by Virgin, and these companies were run by a board consisting of locally elected GPs and one Virgin representative. 358 surgeries were listed [where?] as being involved in mid-2012.

In October 2012 the company announced that it would be taking over all jointly owned GP-provider companies, in order to avoid any conflict of interest arising in respect of contracts with clinical commissioning groups. Following this change, the company made bids for contracts put out by these clinical commissioning groups, NHS England and local authorities, and has contracts stretching for more than a decade with a total potential value (as of 2018) of £2bn.

In December 2021, the company was acquired for an undisclosed sum by Twenty20 Capital, a privately owned investor in companies that provide workforce management and recruitment services. It was immediately rebranded as HCRG Care Group.

HCRG Care Group was the target of a cyberattack in February 2025 from the Medusa ransomware group. Medusa claimed to have encrypted over 50tb of data, with over 2tb of data of it being uploaded, including sensitive medical records, financial records, and identities. The group demanded $2m ransom to not release the data.

In March, HCRG Care Group attempted to use a UK court-ordered injunction to compel a cybersecurity breach reporting website, databreaches.net, to remove references to examples of data taken from HCRG Care Group's systems. The injunction was issued by High Court judge Michael Soole, based on the request by HCRG's attorneys at Pinsent Masons. The US-based maintainer of the website refused to comply due to the injunction's inapplicable jurisdiction, and published details of the injunction online, noting the chilling effects of suppressing speech. Their domain registrar also declined to comply.

See all
User Avatar
No comments yet.