More than 90 hospital staff accessed the medical records of the victims of the Nottingham attacks, raising concerns over a potential data breach.
Barnaby Webber and Grace O’Malley-Kumar, both 19, along with 65-year-old Ian Coates, were fatally stabbed by Valdo Calocane in June 2023.
The victims’ families have described the unauthorised viewing of their records as an unacceptable invasion of privacy.
Nottingham University Hospitals (NUH) NHS Trust has launched an investigation after it emerged that 91 staff members viewed the victims’ records.
While some had legitimate reasons for access, the trust is examining whether others may have done so inappropriately.
The families of the victims have condemned the incident, calling it a “gross and inexcusable” violation of their loved ones’ privacy. Emma Webber, the mother of Barnaby Webber, expressed deep concern over how sensitive medical information could be misused or leaked.
This is not the first instance of improper access to information related to the Nottingham attacks. In December, the Ministry of Justice (MoJ) launched an investigation into claims that its staff had illegally accessed computer files connected to the case.
Additionally, a Nottinghamshire Police special constable was previously dismissed for viewing bodycam footage from the crime scene without authorisation.
Dr Manjeet Shehmar, medical director at NUH, acknowledged the distress this has caused the victims’ families and assured that the trust is committed to uncovering the truth.
He confirmed that any staff found to have accessed the records without a valid reason would face appropriate action.
As investigations continue, questions remain over how such sensitive data could be accessed by so many staff members and what measures need to be in place to prevent further breaches.