Info Gov

The Ministry of Justice (MoJ) has launched an “urgent investigation” after court files detailing victims, their families and survivors of the Southport attack in July 2024 were accessed without authorisation.

According to the MoJ, the issue was identified through a review of its digital systems.

It said: “The Ministry of Justice's independent Data Protection Officer has assessed the matter and determined that, for a limited number of individuals, the information accessed included sensitive and personal data, likely to result in a high risk to their rights and freedoms.

“HMPPS and HMCTS are now investigating this, and any victims impacted are being notified directly and the Information Commissioner's Office has been informed.”

The MoJ found no evidence that personal data had been shared with third parties.

This comes after North-West Ambulance Service issued a formal investigation in July into whether staff “inappropriately” accessed the medical records of Southport attack victims.

The service confirmed it had identified concerns about potential inappropriate access to patient records.

Lawyers representing one of the girls said a recent string of patient data breaches had highlighted “a deep-rooted culture of snooping within the NHS”.

On 29 July 2024, Bebe King, Elsie Dot Stancombe, and Alice da Silva Aguiar were killed by Axel Rudakubana (AR), at a Taylor Swift-themed dance class.

A Ministry of Justice spokesperson said: “We are appalled that this happened and recognise the distress it will have caused victims, survivors, and their families.

“We apologise to those affected - unauthorised access to court files is completely unacceptable.

“This is now being investigated urgently, and the Prime Minister has asked the Lord Chancellor to oversee this. All wrongdoing will be met with extremely firm action.”

Also in this section

Oct 02, 2026

Campaigners invoke UK GDPR to challenge NHS Palantir platform

Campaign group 38 Degrees has coordinated legal objections from more than 44,000 people asking NHS England to stop the Federated Data Platform (FDP), which runs on Palantir software, from sharing, storing or using their health records, the Guardian has reported.
Sep 28, 2026

NHS staff suspended or removed from duty over access to Noah Woods' medical records

East Suffolk and North Essex NHS Foundation Trust (ESNEFT) has suspended or removed from active duty ten members of staff and reported itself to the Information Commissioner's Office after concerns that the medical records of three-year-old Noah Woods were viewed without a legitimate clinical reason following his disappearance.
Sep 23, 2026

Hospital trust reports personal data breach to ICO after reused database script wipes maternity access logs

Nottingham University Hospitals NHS Trust has reported a personal data breach to the Information Commissioner's Office after a script intended to copy a radiotherapy database was run against its legacy maternity system instead, overwriting records for women and babies treated between September 2011 and November 2022 and permanently destroying most of the audit trail showing who accessed them.

InfoGov Masthead Newsletter 800