The Plain Record

Neutral daily news — clear headlines, complete facts.

National

NHS Trust Dismisses 15 Staff Members for Accessing Nottingham Attack Victims' Records

Nottingham University Hospitals NHS Trust has dismissed a total of 15 employees for unauthorized access to the medical records of victims killed in a 2023 stabbing attack.

Background: How the Supreme Court takes a case

Published October 17, 2026 at 3:12 PM EDT

The short answer

Nottingham University Hospitals NHS Trust has dismissed a total of 15 employees for unauthorized access to the medical records of victims killed in a 2023 stabbing attack.

NHS Trust Dismisses 15 Staff Members for Accessing Nottingham Attack Victims' Records

The Facts

Who
Nottingham University Hospitals NHS Trust staff, victims Barnaby Webber, Grace O'Malley-Kumar, and Ian Coates.
What
Nottingham University Hospitals NHS Trust dismissed 15 staff members for inappropriately accessing medical records related to the Nottingham attacks.
When
Friday (reported)
Where
Nottingham, United Kingdom
Why
The dismissals occurred following an investigation into unauthorized viewing of sensitive medical data by doctors, nurses, and other healthcare professionals.

Nottingham University Hospitals (NUH) NHS Trust announced that the total number of staff members dismissed for inappropriately accessing the medical records of the Nottingham attack victims has risen to 15. The trust, which previously reported 11 sackings in May, confirmed the additional four dismissals during a recent update on Friday. The internal investigation follows the 2023 stabbings of students Barnaby Webber and Grace O’Malley-Kumar, and grandfather Ian Coates, by Valdo Calocane.

The trust reported that the disciplinary actions involved a range of personnel, including doctors, nurses, registered healthcare professionals, and other staff members. In addition to the 15 dismissals, the trust issued 15 final written warnings and two first written warnings. Two individuals were found to have no case to answer. NUH officials stated that they have notified the Information Commissioner’s Office, Nottinghamshire Police, and professional regulators including the General Medical Council and the Nursing and Midwifery Council.

Dr Manjeet Shehmar, medical director at NUH, stated there was no excuse for accessing patient records without a legitimate reason and apologized to the victims' families. Dr Sanjoy Kumar, the father of Grace O’Malley-Kumar, described the unauthorized access to medical data as "disgraceful" and called for authorities to address the failures. The trust is currently testing a new monitoring system to detect potential data breaches and has launched an educational campaign for staff regarding data protection rules.

For patients and staff, these events indicate a change in how medical privacy is monitored within the hospital system. Personnel now face a new detection system designed to alert the trust to potential breaches, and the trust has warned of "serious consequences" for data protection violations. The ongoing investigations into the records of the surviving victims suggest that further disciplinary actions could follow.

The broader implications of these failures are being examined by the Nottingham Inquiry, a statutory public inquiry led by retired judge Deborah Taylor KC. The inquiry, which heard 14 weeks of evidence from 164 witnesses between February and June 2026, is investigating the actions of multiple agencies prior to and after the attacks. The final findings of this inquiry are scheduled for publication by May 2027. Separately, Nottinghamshire Police confirmed it would carry out an audit into staff access following a complaint filed in March.

Timeline of what happened

Key dates and decisions, in the order they occurred.

  1. June 13, 2023

    Nottingham stabbing attacks occur

  2. January 24, 2024

    Valdo Calocane pleads guilty to manslaughter

  3. January 24, 2024

    Court workers inappropriately access case information

  4. March 24, 2024

    Audit of police staff access requested following complaint

  5. May 24, 2024

    NUH NHS Trust confirms first 11 staff dismissals

  6. December 24, 2024

    Investigation into Ministry of Justice staff access begins

  7. February 24, 2026

    Nottingham Inquiry hearings begin

  8. June 24, 2026

    Public inquiry witness testimony concludes

  9. September 24, 2026

    Closing statements delivered at public inquiry

  10. May 24, 2027

    Scheduled publication of final inquiry findings

Summaries are written by The Plain Record to state the facts of a story plainly and without political slant. Drafted with AI assistance and checked against the source record before publication. See how we report, or report a correction.

← Back to the front page

Questions readers ask

What happened: NHS Trust Dismisses 15 Staff Members for Accessing Nottingham Attack Victims' Records?

Nottingham University Hospitals NHS Trust dismissed 15 staff members for inappropriately accessing medical records related to the Nottingham attacks.

Who is involved?

Nottingham University Hospitals NHS Trust staff, victims Barnaby Webber, Grace O'Malley-Kumar, and Ian Coates.

When did this happen?

Friday (reported)

Where did this happen?

Nottingham, United Kingdom

Why does this matter?

The dismissals occurred following an investigation into unauthorized viewing of sensitive medical data by doctors, nurses, and other healthcare professionals.