Full Breakdown
NHS Staff Dismissed for Unauthorized Access to Nottingham Attack Victims’ Records
By Drooid · · How we work
Core Event and Disciplinary Outcomes
Nottingham University Hospitals NHS Trust (NUH) has dismissed 15 staff members after an internal investigation found they accessed the medical records of three victims of the June 2023 Nottingham stabbing attack—19-year-old students Barnaby Webber and Grace O’Malley-Kumar, and 65-year-old caretaker Ian Coates. The same inquiry issued 15 final written warnings, two first written warnings, and cleared two staff members of wrongdoing. The victims’ families were briefed on the latest outcomes this week.
Investigation Background and Scope
The investigation, launched in 2025, examined access logs for illegitimate viewing of patient files. It identified inappropriate access not only to the deceased victims’ records but also to those of surviving victims, including Wayne Birkett, Sharon Miller and Marcin Gawronski. NUH reported the findings to the Information Commissioner’s Office and Nottinghamshire Police. The review covered doctors, nurses, registered healthcare professionals and other staff.
Official Statements and Policy Response
Sir Jim Mackey, head of NHS England, warned that “snooping” could lead to career loss and criminal records, and announced a new crackdown in which any staff suspected of inappropriate access will be suspended immediately and have their system privileges revoked. He also wrote to all NHS trusts demanding rapid implementation of the new safeguards.
Preventive Measures and System Enhancements
The trust is testing a new monitoring system that continuously audits record access, flags suspicious behavior, and will enter a pilot phase with a target go-live early next year.
Outlook for NHS Data Governance
The head of NHS England indicated that the recent disciplinary actions are part of a broader effort to curb “too many cases” of staff abusing patient information. Ongoing investigations remain active, and the forthcoming monitoring system is expected to provide real-time alerts to prevent future breaches.