NHS Trust Fires Staff Who Accessed Nottingham Attack Victims' Records

Nottingham University Hospitals NHS Trust has dismissed multiple employees after an investigation found they unlawfully accessed the medical records of victims from the 2023 Nottingham attacks.

Nottingham University Hospitals NHS Trust confirmed staff were sacked for accessing victims' records without authorisation.
The records belonged to victims of the June 2023 Nottingham attacks, in which three people were killed.
The trust stated that investigations into the unauthorised access are ongoing.
No specific number of dismissed employees has been confirmed in public statements.
The trust has not confirmed whether the matter has been referred to police or the Information Commissioner's Office.

Nottingham University Hospitals NHS Trust has dismissed a number of employees after internal investigations found they accessed the medical records of victims from the June 2023 Nottingham attacks without authorisation, the trust confirmed this week.

Three people were killed in the attacks on 13 June 2023. The victims — Ian Coates, Barnaby Webber, and Grace O'Malley-Kumar — were named publicly in the immediate aftermath. Their families have since been central to proceedings around the case, including the sentencing of perpetrator Valdo Calocane in January 2024.

The trust told the BBC that investigations remain ongoing and declined to specify how many staff members had been dismissed or which departments they worked in. It also did not confirm whether any referral had been made to Nottinghamshire Police or the Information Commissioner's Office.

Unauthorised access to patient records in the NHS is a breach of the Data Protection Act 2018 and NHS confidentiality frameworks, and can constitute a criminal offence under the Computer Misuse Act 1990 depending on circumstances.

The trust's statement did not address when the access occurred, how it was detected, or how long the conduct had been ongoing before dismissals followed.