NRS Healthcare data breach

Buckinghamshire Council has been notified that NRS Healthcare, one of its suppliers of health and care products, has suffered a cyber-attack and personal data has been breached.

The council is working with NRS Healthcare to understand the extent of the breach and will contact our affected clients directly if their information has been taken.

At this time, it is not clear what personal data has been taken in this incident.  As we receive more information we will contact anyone directly if their information has been put at risk.

NRS Healthcare is one of the largest providers of aids to daily living, medical devices, therapy equipment, wheelchairs, continence products and Technology Enabled Care to adults and children who are social care clients and/or in receipt of healthcare services.

We were made aware of the cyber-incident reported by NRS Healthcare on 2 April 2024. On 7 May, NRS Healthcare told us that data had been taken during this attack.

As soon as we heard we spoke to NRS to get information about what happened and the potential impact on client data in Buckinghamshire.

We are working very closely with NRS Healthcare to understand the extent of the cyber incident.  NRS Healthcare have engaged IT and cyber security experts to investigate this incident and identify any information which may have been compromised by the cyber-attack. 

NRS Healthcare have also notified and are working with the Information Commissioner’s Office, the National Cyber Security Centre and the National Crime Agency to manage this incident and have already taken a number of steps to ensure the safety of their computer systems.

If this data breach has a negative impact on anyone in Buckinghamshire, we will contact them directly and will be putting in place full support for everyone involved.

We are asking everyone to be cautious when opening emails and not to click on any links or documents unless they are sure they are genuine.

People should also be extra-cautious about text messages, phone calls and home visits from people, especially those they are not expecting.

There is also a full range of guidance and support on reporting scams on the National Cyber Security Centre website.

It is likely that many local authorities and parts of the NHS across the country will be impacted by this.