Eleven NHS Staff Sacked After Illegally Accessing Medical Records of Nottingham Attack Victims

The breach relates to the aftermath of the June 2023 attacks in Nottingham, in which students Barnaby Webber and Grace O’Malley-Kumar, both 19, and 65-year-old caretaker Ian Coates were killed by Valdo Calocane. In the hours and days following the tragedy, hospital systems containing confidential A&E and medical records were accessed by multiple staff members, prompting questions about privacy safeguards in high-pressure clinical environments.

According to reports from Nottingham University Hospitals NHS Trust, at least 11 employees have been sacked, while a further 14 have received formal disciplinary action, including written warnings. Investigators found that dozens of staff accessed the victims’ records, with only a portion deemed to have had a legitimate clinical or administrative reason to do so, and the rest being considered inappropriate access.

The incident has intensified anger among the victims’ families, who have repeatedly described the breaches as a serious violation of trust and privacy. The NHS trust has apologised and stated that it is cooperating with regulators and law enforcement while continuing to review how such widespread access occurred. A wider public inquiry into the circumstances surrounding the attacks and institutional responses is still ongoing, adding further scrutiny to how public agencies handled both the tragedy and its aftermath.