Healthcare Staff Illegally Access Victims' Medical Records in UK Attacks

Severity: High (Score: 66.0)

Sources: Hsj, www.mirror.co.uk

Summary

In two separate incidents, healthcare staff accessed the medical records of victims from high-profile attacks in the UK. At the Southport mass stabbing in 2024, 48 staff members inappropriately accessed records of victims, leading to accusations of a cover-up by the University Hospitals of Liverpool Group. Survivors, including Leanne Lucas, expressed outrage over the breach of privacy. Similarly, at Nottingham University Hospitals Trust, staff allegedly accessed records of victims from a 2023 attack, prompting an urgent investigation. Families of the victims are horrified and demand accountability. Both incidents highlight systemic issues within NHS trusts regarding patient privacy. Legal representatives are seeking audits and accountability for those involved. The trusts have faced criticism for their handling of these breaches. Key Points: • 48 staff members accessed medical records of Southport attack victims without justification. • Nottingham University Hospitals Trust is investigating unauthorized access to records of attack victims. • Families of victims are demanding accountability and transparency from healthcare trusts.

Key Entities

• Data Breach (attack_type)
• Nottinghamshire Healthcare NHS Foundation Trust (company)
• Nottingham University Hospitals NHS Trust (company)
• Nottingham University Hospitals Trust (company)
• University Hospitals Of Liverpool Group (company)
• CWE-200 - Exposure of Sensitive Information (cwe)
• CWE-862 - Missing Authorization (cwe)
• Healthcare (industry)