A hospital trust is investigating claims that staff members may have improperly accessed the medical records of three individuals killed in the tragic Nottingham attacks in June 2023.
Barnaby Webber, 19, Grace O’Malley-Kumar, 19, and Ian Coates, 65, were brutally stabbed to death by Valdo Calocane in the city. Following the incident, reports surfaced alleging that some hospital staff may have accessed the victims’ medical records without proper authorization.
Dr. Manjeet Shehmar, the medical director at Nottingham University Hospitals NHS Trust, confirmed that the trust had launched an investigation into these “serious concerns.” She expressed deep regret that the victims’ families would face further distress due to the inquiry.
“The families of Ian, Grace, and Barnaby have already endured unimaginable grief, and I sincerely apologize that this investigation will add to their suffering,” Dr. Shehmar stated. “We are committed to determining what happened, and if necessary, we will take appropriate action.”
The claims of record breaches were first reported by the Daily Mirror, which quoted the victims’ families as describing the alleged access as “sickening.” They called the actions “gross invasions of privacy and civil liberties” that went far beyond mere data breaches.
This investigation follows similar claims of misconduct within other agencies linked to the attacks. In recent months, Ministry of Justice (MoJ) staff have faced allegations of illegally accessing files related to the incident. Additionally, a special constable with Nottinghamshire Police was dismissed for viewing bodycam footage showing the aftermath of the attacks.
The June 2023 attack saw Calocane murder Mr. Webber, Ms. O’Malley-Kumar, and Mr. Coates before using Mr. Coates’s van to drive into three pedestrians in the city centre. In January 2024, Calocane admitted to manslaughter on the grounds of diminished responsibility and was sentenced to a hospital order.
Following the sentencing, the families expressed their frustration with the police and the Crown Prosecution Service (CPS). A subsequent review into the CPS’s handling of the case found that, while the decision to accept Calocane’s plea was correct, the case could have been managed more efficiently.
The review also highlighted significant failures in the NHS’s mental health care for Calocane prior to the killings. These included his refusal to take anti-psychotic medication due to his dislike of needles and his lack of contact with mental health services for months before the attack.
In response to public outcry, a judge-led public inquiry into the attacks was announced in early February 2025. The inquiry is set to scrutinize various agencies involved, including the NHS, police, and CPS.
The families of the victims expressed their support for the inquiry, calling it a “watershed moment.” They were briefed on the inquiry plans during a meeting at Downing Street, where they were told by Prime Minister Sir Keir Starmer that a comprehensive review of the agencies involved would take place.
As the investigation into the inappropriate access to medical records unfolds, the families continue to await justice and answers, hoping that the inquiry will bring the truth to light.