Health secretary condemns 'disgraceful' NHS data breaches on attack victims

Fifteen staff sacked over Nottingham attacks records; tiger attack victim's records may also have been breached

By LineZotpaper

Published18 October 2026

Read Time2 min

Sources2 outlets

Health Secretary Yvette Cooper has called the accessing of medical records of the Nottingham attacks victims and a man killed by a tiger a 'disgrace', saying she expects action including sackings and swift suspensions. Her comments follow the sacking of 15 staff at Nottingham University Hospitals NHS Trust and an investigation into potential breaches at Yorkshire Ambulance Service.

Speaking to the BBC's Sunday with Laura Kuenssberg, Cooper said there must be 'proper respect for patients' from NHS staff. 'There are proper data and privacy standards across the NHS. Every member of NHS staff knows that, and every member of NHS staff needs to abide by it,' she said. 'It is a disgrace that we've had cases where people don't, and we do expect action to be taken, including people being sacked.'

Nottingham University Hospitals NHS Trust confirmed it had sacked 15 members of staff – including doctors, nurses and other healthcare professionals – for inappropriately accessing the medical records of students Barnaby Webber and Grace O'Malley-Kumar, and grandfather Ian Coates, who were stabbed to death in June 2023 by Valdo Calocane. The trust said it had informed the Information Commissioner's Office, Nottinghamshire Police and independent regulators.

Dr Sanjoy Kumar, Grace's father, said the families would like to meet Cooper and called for action to stop the breaches. 'I am appalled. It's time to get a handle on these failures,' he said.

Separately, Yorkshire Ambulance Service said staff may have accessed the records of William Chapman, 24, who was mauled to death by a tiger at Yorkshire Wildlife Park on 10 October. An investigation has been launched.

The trust is testing a new system to protect patient records and alert the trust to potential breaches.

Analysis

Why This Matters

Patient trust in the NHS is at stake when medical records are accessed without legitimate reason, especially after traumatic incidents.
The breaches suggest systemic failures in data governance that could affect how victims and their families engage with healthcare.
The government faces pressure to strengthen enforcement and deterrents beyond individual sackings.

Background

NHS staff are bound by strict data and privacy standards, and accessing records without a legitimate reason is a disciplinary offence. High-profile incidents often prompt reviews, but repeated breaches – including those involving crime victims – have raised questions about culture and oversight. Nottingham University Hospitals NHS Trust has been under scrutiny since the 2023 attacks.

Key Perspectives

Victims' families: Dr Sanjoy Kumar called the breaches 'disgraceful' and demanded that Health Secretary Yvette Cooper take concrete action to stop them, asking 'when is this going to stop?' Health Secretary Yvette Cooper: She condemned the breaches, said the 'overwhelming majority' of staff respect privacy, and expects swift suspensions and sackings where breaches occur. NHS trusts: Nottingham University Hospitals has sacked 15 staff and is implementing a new alert system; Yorkshire Ambulance Service has launched an investigation and informed the victim's family.

What to Watch

Outcome of the Information Commissioner's Office assessment of the Nottingham breaches.
Yorkshire Ambulance Service's investigation into the tiger attack victim's records.
Effectiveness of the new system being tested at Nottingham University Hospitals Trust.
Potential calls for a wider independent review of NHS data access practices.

Sources

NHS data breaches a disgrace, says health secretary · BBC News
NHS data breaches a disgrace, says health secretary · BBC News

Checked

12 claims in this story checked against 1 source: 9 supported.

Show each claim

Not in the sourcesCooper described the NHS data breaches as “disgraceful”.BBC News: “Cooper said: “It is a disgrace that we've had cases where people don't””
Partly supportedCooper called the accessing of both the Nottingham victims’ and tiger victim’s records “a disgrace”.BBC News: “NHS staff accessing the medical records of the Nottingham attacks victims and possible breaches over a man killed by a tiger is a “disgrace”, the health secretary has said.”
SupportedNottingham University Hospitals NHS Trust sacked 15 staff over the Nottingham victims’ records.BBC News: “Nottingham University Hospitals (NUH) NHS Trust confirmed it had sacked a total of 15 members of staff”
SupportedWilliam Chapman’s medical records may also have been improperly accessed.BBC News: “Yorkshire Ambulance Service said William Chapman's medical records may have been accessed illegitimately.”
SupportedCooper said staff should be swiftly suspended while breaches are investigated.BBC News: “We also expect where there are these breaches taking place, we expect people to be swiftly suspended while investigations take place.”
SupportedCooper said there must be “proper respect for patients” from NHS staff.BBC News: “Speaking to the BBC's Sunday with Laura Kuenssberg, Cooper said “there's got to be proper respect for patients” from NHS staff.”
SupportedCooper said: “There are proper data and privacy standards across the NHS. Every member of NHS staff knows that, and every member of NHS staff needs to abide by it.”BBC News: “There are proper data and privacy standards across the NHS. ... Every member of NHS staff knows that, and every member of NHS staff needs to abide by it”
SupportedCooper said: “It is a disgrace that we've had cases where people don't, and we do expect action to be taken, including people being sacked.”BBC News: “It is a disgrace that we've had cases where people don't, and we do expect action to be taken, including people being sacked”
SupportedBarnaby Webber, Grace O'Malley-Kumar and Ian Coates were stabbed to death by Valdo Calocane in June 2023.BBC News: “Students Barnaby Webber and Grace O'Malley-Kumar, and grandfather Ian Coates, were stabbed to death on 13 June 2023 by Valdo Calocane”
SupportedDr Sanjoy Kumar said: “I am appalled. It's time to get a handle on these failures.”BBC News: “I am appalled. It's time to get a handle on these failures.”
SupportedWilliam Chapman, 24, was mauled to death by a tiger at Yorkshire Wildlife Park on 10 October.BBC News: “William Chapman, 24, was mauled to death at Yorkshire Wildlife Park on 10 October”
Sources say otherwiseYorkshire Ambulance Service is testing a new system to protect records and flag potential breaches.BBC News: “NUH added a new system, currently under testing, is being implemented to protect patient records in future and alert the trust to potential breaches.”