Nottingham University Hospitals NHS Trust dismissed 15 staff members after they improperly accessed confidential medical files tied to the Nottingham Inquiry into the 2023 Nottingham attacks. The trust acted after investigating the breach, which involved records belonging to Barnaby Webber, Grace O'Malley-Kumar and Ian Coates.
The dismissals came after a review that found staff members had looked at sensitive files they were not supposed to see. Elena Coleman, the writer and researcher on the piece, said the case shows how digital audit trails can catch unauthorized access to patient records.
Nottingham University Hospitals NHS Trust
The trust said staff across hospital departments can access electronic patient records, which is part of day-to-day care. That same access can be misused, and the trust said annual data protection modules and confidentiality clauses are part of staff training and requirements.
Some employees received written warnings or internal retraining for minor or ambiguous access flags. The difference in outcome points to how the trust separated more serious breaches from cases it treated as less clear-cut.
Victims of the 2023 Nottingham attacks
Webber, O'Malley-Kumar and Coates were killed in the 2023 Nottingham attacks in 2023. Their records became the subject of a disciplinary process that ended with dismissals, not just warnings, after the trust’s investigation.
For families and other affected readers, the practical point is simple: hospital record systems are not free-access spaces, even though many staff members can open them across departments. Audit logs leave a trail, and that trail can trigger discipline when access crosses the line from care into curiosity.
How many staff were investigated in total, and what exact access incidents led to the fifteen dismissals? Those are the details still missing from the public account, even as the trust has already shown it will remove staff when it finds a breach serious enough to justify it.
