{"id":585341,"date":"2026-05-15T11:06:09","date_gmt":"2026-05-15T11:06:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/585341\/"},"modified":"2026-05-15T11:06:09","modified_gmt":"2026-05-15T11:06:09","slug":"exclusive-southport-attack-victim-accuses-trust-of-cover-up-over-care-records-breach-hsj-local","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/585341\/","title":{"rendered":"Exclusive: Southport attack victim accuses trust of \u2018cover up\u2019 over care records breach | HSJ Local"},"content":{"rendered":"<p>Three young girls \u2013 Elsie Dot Stancombe, Alice da Silva Aguiar, and Bebe King \u2013 were killed in the attack on 29 July 2024, while 10 others were injured. The perpetrator was jailed for life last year.<\/p>\n<p>Some of the injured were treated at\u00a0University Hospitals of Liverpool Group. HSJ\u00a0has learned that a\u00a0\u201cstandard\u201d information access audit carried out by the trust in the days after the incident revealed that 48 staff accessed their records without a good reason. However, this information was not given to the patients involved until this week, following\u00a0HSJ\u2019s\u00a0inquiries.<\/p>\n<p>Leanne Lucas survived the Southport attack and was one of UHLG patients whose records were inappropriately accessed.<\/p>\n<p>She told\u00a0HSJ: \u201cI am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable.\u00a0\u00a0Nothing will take away my gratitude to the staff who saved my life, but 48 people not involved in my care abused their position of trust to access the files of victims who have suffered unspeakable trauma. The decision to keep this from me for almost two years is a new low. I am speaking out as I want this scandal and the attempted cover-up by senior management exposed for what it is.\u201d<\/p>\n<p>The trust denies any attempt at a cover-up. Its board had originally planned to tell those involved about the breach.\u00a0However,\u00a0HSJ\u00a0understands its leadership changed their mind sometime in 2025, after trust directors decided that informing the patients would not be in their best interests, as it risked retraumatising them.<\/p>\n<p>The existence of the Liverpool trust\u2019s internal investigation was disclosed in a report written for the board\u2019s private meeting this month, which has been seen by\u00a0HSJ.<\/p>\n<p>The patients and their families have now been informed of the breach. To date, only Ms Lucas has waived her right to anonymity.\u00a0<\/p>\n<p>Nicola Brook is a Legal Director at Broudie Jackson Canter, who represent three of the survivors, including Ms Lucas, at the Southport Inquiry. She said: \u201cthis is a truly unbelievable breach of privacy for victims of one of the most horrific attacks\u00a0this country has ever seen. This is more than a few bad apples when it was 48 different members of staff who, for no legitimate reason, chose to access vulnerable victims\u2019 records.\u00a0\u00a0<\/p>\n<p>\u201cThat speaks to a culture, and one that will only change if there are real consequences for those responsible. For the trust to then try to hide that it happened is appalling. The trust has many questions to answer, and we will be ensuring our clients get those answers as soon as possible.\u201d<\/p>\n<p>Nicola Ryan-Donnelly from Fletchers Solicitors has called the incident \u201ca deeply disturbing abuse of power and a shocking breach of privacy\u201d including of a young girl they represent.\u00a0<\/p>\n<p>\u201cIt is absolutely shameful that the trust have known about this gross breach since a few days after the attack, yet have sought to keep it from the survivors and their families until almost two years later. Our client, who is now growing into a young woman, is old enough to properly understand what this means; that staff opened her records, not to aid to her recovery but to pry.\u201d<\/p>\n<p>She added:\u00a0\u201cWe have already met with the trust to begin fully investigating this and will now be working to ensure that the trust gives her family the answers they deserve, and that those 48 staff who inappropriately accessed these records face proper accountability.\u201d<\/p>\n<p>The revelations that the care records of the Southport victims had been inappropriately accessed follows a\u00a0similar incident at Nottingham University Hospitals Trust last year. In this case, staff accessed the care records of the victims of the attack by Valdo Calocane.\u00a0Their families told\u00a0<a href=\"https:\/\/www.mirror.co.uk\/news\/uk-news\/nottingham-attack-families-sickened-after-34808522\" target=\"_blank\" rel=\"nofollow noopener\">the Mirror<\/a>, which first reported claims of the breaches, that the revelations were \u201csickening\u201d and \u201cgross invasions of privacy and civil liberty\u201d.<\/p>\n<p>Trust CEO: Breach was \u2018inexcusable\u2019<\/p>\n<p>The internal Liverpool Hospitals report seen by HSJ said 64 cases of access, which raised suspicions, had been identified by the audit. Four of the staff involved left the trust before the investigation.\u00a0Of the remaining 60 staff, 12 were found to have had legitimate reasons for accessing the records.<\/p>\n<p>The remaining 48 have\u00a0faced a range of disciplinary action from \u201cinformal counselling to a final written warning\u201d, though none have been dismissed.<\/p>\n<p>UHLG chief executive James Sumner today issued a formal apology to the victims. He said: \u201cWe are sincerely sorry for any distress that may have been caused to the patients that were under our care and who trusted us to look after them when they were most vulnerable.<\/p>\n<p>\u201cBreaches of patient confidentiality are inexcusable and undermine the hard work of those teams who sought to provide the highest standard of care to these patients after they experienced such traumatic and life-changing events. Staff who were found to access patient records were subject to HR disciplinary processes.\u201d<\/p>\n<p>He said the trust had notified the relevant regulators and professional bodies, including the Information Commissioner\u2019s Office, and \u201cwere fully transparent about any findings and actions taken\u201d.<\/p>\n<p>The CEO added: \u201cLearning from the incident has led to the introduction of a digital solution which reduces inappropriate access to patient records of this nature.\u201d<\/p>\n<p>The trust reported the incident to the ICO in August 2024, \u201cin line with standard practice\u201d.\u00a0The ICO confirmed the trust had informed them about the breaches, but it had not opted to carry out its own independent investigation.<\/p>\n<p>It said: \u201cIn any circumstance, we always reserve the right to launch our own investigation, based on our assessment of criminality or if new information comes to light.\u201d<\/p>\n<p>The watchdog said it was \u201csatisfied\u201d no staff had broken data protection laws relating to unlawfully obtaining personal data (See the full ICO statement below).<\/p>\n<p>Updated at 10am on 15th May 2025 to include comment from Fletchers Solicitors<\/p>\n<p>The ICO\u2019s statement in full<\/p>\n<p>\u201cPeople need to trust that their medical information is safe and only available to healthcare staff who need to use it. When medical records are accessed inappropriately, this can be deeply concerning for patients and undermine their confidence in those responsible for delivering their care.<\/p>\n<p>\u201cWe can confirm [the trust] has been in contact with us regarding reports of alleged inappropriate access to medical records by staff.<\/p>\n<p>\u201cWhile the trust carried out its own internal investigations and disciplinary processes, we have received regular updates and provided support where needed in line with our standard approach.<\/p>\n<p>\u201cWe are satisfied that no referrals have been made by the trust in respect to staff suspected of breaking data protection law and unlawfully obtaining personal data.<\/p>\n<p>\u201cIn any circumstance, we always reserve the right to launch our own investigation, based on our assessment of criminality or if new information comes to light.<\/p>\n<p>\u201cWe are in regular contact with the National Data Guardian and continue to remind all healthcare organisations about the importance of keeping patient data secure.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Three young girls \u2013 Elsie Dot Stancombe, Alice da Silva Aguiar, and Bebe King \u2013 were killed in&hellip;\n","protected":false},"author":2,"featured_media":585342,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[102,2960,56,54,55],"class_list":["post-585341","post","type-post","status-publish","format-standard","has-post-thumbnail","category-healthcare","tag-health","tag-healthcare","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/585341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=585341"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/585341\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/585342"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=585341"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=585341"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=585341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}