Nhs Disability Equipment Provider On Brink Of Collapse A Year After Cyberattack

A major supplier of healthcare equipment to the UK’s National Health Service and local councils is on the verge of collapse 16 months after falling victim to cyber criminals.

Private equity-backed NRS Healthcare works with around 40 councils across England and Northern Ireland, although most of its services are provided to authorities in Southeast England.

In a statement to the BBC, a spokesperson at the company said management had tried in recent months “to turn around the business and explore all possible options to safeguard services and protect the communities who rely on them.

“We have already begun transferring all services to other providers and are implementing plans with the local authorities to preserve service provision and jobs.”

NRS Healthcare said in its last set of public accounts for fiscal 2024 ended March 31, 2024, that operations were minimally affected by the cyberattack – claimed by RansomHub – as it happened just before the close of that trading period. It added that the financial toll was expected to be heavier in the following fiscal year.

The document states: “On 28th March 2024, the organization was the target of a cyber incident. Whilst the incident had very little impact on the results for the reporting period within these financial statements due to the timing, it is important to note that the business recovered operationally very swiftly, enabling the Group to meet the needs of our service users with minimal disruption.

“Our response also resulted in a pre-planned six-month digital transformation project being accelerated and delivered in just three weeks; this included the reimaging and/or replacement of over 1,000 laptops across the estate and further enhancing our cybersecurity with the highly rated external certification, Cyber Essentials Plus.

“Costs relating to the recovery of the cyber incident have impacted the subsequent reporting period and are ongoing into 2025.

The company had “completed restructuring of debt held on the balance sheet to enable further investment in technology and other strategic inititatives,” earlier in March 2024 before the cyber attack.

Sky News reports that NRS Healthcare had tasked PricewaterhouseCoopers, one of the Big Four accountancy firms, to secure a buyer for the business but it been unable to do so and that NRS is now nearing compulsory liquidation.

Compulsory liquidation is a formal insolvency procedure for companies in the UK. Unlike in the US, where the term “bankruptcy” can apply to businesses, in UK law, bankruptcy refers only to individuals. Compulsory liquidation proceedings are typically initiated by creditors and involve the courts assuming all power over the company, selling off its assets, and winding it down.

Sky News also claimed that the terms of NRS Healthcare’s contracts with local authority customers had resulted in its financial decline.

According to a letter sent to the Department of Health and Social Care (DHSC), local councils warned of NRS Healthcare’s financial instability and how, if it were to collapse, they would be unable to meet their statutory obligations to provide immediate community support.

NRS provides various products and services including tech-enabled care solutions, occupational therapy, and home improvements, although it’s primarily tasked with providing equipment for hospital leavers, such as wheelchairs and other mobility equipment.

As a result, much of its work is fulfilled on an urgent basis. The letter to DHSC reportedly stated that the majority of these orders require same-day or next-day delivery.

A DHSC spokesperson told The Register: “We are closely monitoring this situation and are working with a range of partners who are supporting local authorities to minimize any potential disruption, find alternative suppliers if needed, and ensure patients continue to receive high-quality care.”

NRS Healthcare is working directly with all local authorities with which it has contracts. If the company ceases trading, local councils are legally required to find alternative solutions to the short-term disability aid needs for their communities.

These obligations are not overseen by central government, although the BBC reported that in their letter to DHSC, councils asked the government for a cash injection to manage a potential transition period if NRS were to liquidate.

The Register contacted NRS Healthcare and backer Graphite Capital for additional information. ®

Original Source