Aintree hospital staff illegally accessed Southport knife attack victims' care details

As many as 48 staff members at Liverpool’s Aintree hospital improperly accessed hospital records of several people who were victims of a knife attack in Southport in July 2024, including a minor girl.

 

The privacy breach occurred in the aftermath of the knife attack when three victims were getting treated at Aintree hospital which is run by the NHS University Hospitals of Liverpool.

 

The incident followed a horrific knife attack where a teenager attacked a Taylor Swift-themed dance event in Southport, killing three little girls and injuring at least ten others. The attack led to significant public outcry and several communal riots across the UK.

 

In January 2025, an 18-year-old British national named Axel Rudakubana pleaded guilty for intentionally murdering and injuring several children on the first day of his trial at Liverpool Crown Court. He was later sentenced to life imprisonment with a minimum prison term of 52 years without parole.  

 

At least three injured victims of the knife attack were admitted at Liverpool’s Aintree Hospital when their care details were improperly accessed by 48 members of the hospital staff. According to BBC, those who viewed the patients’ details were not involved in their care and had no justifiable reason to access their details.

 

Health Services Journal, which broke the story, reported that the unauthorised access was discovered during an information access audit carried out by the NHS Trust shortly after the incident at Southport.

 

"This is a truly unbelievable breach of privacy for victims of one of the most horrific attacks this country has ever seen. This is more than a few bad apples when it was 48 different members of staff who, for no legitimate reason, chose to access vulnerable victims’ records," said Nicola Brook, a Legal Director at Broudie Jackson Canter who is representing three survivors of the incident.

 

The NHS Trust initially planned on informing victims and their families about the unauthorised access of their medical records, but later decided to withhold the information considering that the news may retraumatise victims. The Trust finally informed the victims and their families following inquiries from Health Services Journal.

 

"I am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable.  Nothing will take away my gratitude to the staff who saved my life, but 48 people not involved in my care abused their position of trust to access the files of victims who have suffered unspeakable trauma," 13-year-old survivor Leanne Lucas told HSJ.

 

"The decision to keep this from me for almost two years is a new low. I am speaking out as I want this scandal and the attempted cover-up by senior management exposed for what it is," she added.