More NHS staff sacked over attacks victims’ records

Nottingham hospital trust dismisses 15 staff over improper access to victims’ medical files

Ninoda.com – Fifteen employees have now been dismissed by Nottingham University Hospitals NHS Trust after an investigation found that confidential records connected to the Nottingham attacks had been accessed without a valid professional reason.

The action relates to medical information concerning those killed in the attacks of 13 June 2023: University of Nottingham students Barnaby Webber and Grace O’Malley-Kumar, and Ian Coates, a grandfather. They were fatally stabbed by Valdo Calocane, who had been diagnosed with paranoid schizophrenia in 2020.

The trust had previously confirmed in May that 11 staff members had lost their jobs. Its latest update raises the total number of dismissals to 15, while further investigations remain under way.

Families condemn breaches of confidentiality

Dr Sanjoy Kumar, Grace O’Malley-Kumar’s father, said the findings were deeply upsetting and demanded stronger action over failures to protect highly sensitive patient information.

“I am appalled, it’s time to get a handle on these failures.”

He said medical records must not be treated as material for curiosity.

“Clearly, the way that the highest confidential data, which is medical data, is being looked at by voyeuristic people in the NHS is disgraceful.”

For bereaved families, the unauthorised access has added another layer of distress following the loss of their relatives. Medical information is protected because it can contain intensely personal details, and NHS staff are expected to view it only when doing so is necessary for their work.

Warnings issued alongside dismissals

In addition to the 15 dismissals, Nottingham University Hospitals said it had issued 15 final written warnings and two first written warnings. Two cases resulted in no action after investigators concluded that there was no case to answer.

The disciplinary process has involved doctors, nurses, registered healthcare professionals and other employees. The trust said it had informed relevant outside bodies, including the Nursing and Midwifery Council, the General Medical Council, the Information Commissioner’s Office and Nottinghamshire Police.

Dr Manjeet Shehmar, medical director at the trust, said there could be no justification for looking at a patient’s file without an appropriate purpose.

“There is simply no excuse for accessing the records of a patient without a legitimate reason and I hope this sends a really clear message – we will investigate and we will take action.”

“To lose a loved one in the way that the families of Ian, Grace and Barnaby have is heartbreaking enough. I am so sorry that they have had this further compounded by the actions of these staff members.”

New safeguards being tested

The trust is testing a new system intended to strengthen protection for patient records and flag potential data breaches. It has also run an internal campaign, called Your Responsibility, Your Actions, Their Privacy, to reinforce staff responsibilities and the consequences of failing to comply with data-protection rules.

Shehmar said disciplinary work would continue where further concerns were identified.

“We will continue to investigate inappropriate access to these records and take action as and where necessary.”

“Alongside this, we are doing all we can to educate our staff on appropriate access and how to keep the records of our patients safe. We are also introducing a new system which acts to detect possible data breaches.”

She added that the cases represented a small proportion of the trust’s broader workforce, while stressing that lawful and justified access to records was essential across its hospitals.

“While the actions of these staff members are disappointing, we know that this represents a small number of our wider workforce.”

“We know staff across the trust are listening, learning and doing what they can to ensure that only lawful and justified access takes place in our hospitals.”

Inquiry continues to examine events before and after the attacks

The trust’s work is not limited to the files of those who died. Investigators are also examining possible inappropriate access to records belonging to surviving victims Wayne Birkett, Sharon Miller and Marcin Gawronski.

Nottingham University Hospitals is one of several organisations in which personnel improperly viewed information connected with the attacks. The issue has emerged alongside the statutory Nottingham Inquiry, which is considering the decisions made before the killings and the response that followed.

The judge-led inquiry heard evidence from 164 witnesses over 14 weeks between February and June 2026, followed by two days of closing submissions from core participants in September. It is chaired by retired senior judge Deborah Taylor KC, with findings expected by May 2027.

Its hearings examined the contacts authorities had with Calocane in the years preceding the attacks. Evidence exposed failures and missed opportunities involving agencies including health services and police. The inquiry heard that Calocane had been detained under the Mental Health Act on four occasions and had previous police contact linked to violent incidents.

Calocane pleaded guilty in January 2024 to manslaughter on the grounds of diminished responsibility, arising from his paranoid schizophrenia. He is subject to an indefinite hospital order and is being held in a high-security facility.

Barnaby Webber and Grace O’Malley-Kumar had been walking home after a night out in the early hours of 13 June 2023 when they were killed. Ian Coates was also killed later that morning. The continuing inquiry and the trust’s disciplinary investigations remain focused on accountability, safeguarding and the handling of deeply personal information connected to the tragedy.