The University Hospitals of Liverpool Group admitted that nearly 50 staff members improperly viewed the medical records of knife attack survivors and fatalities from a dance class in Southport, prompting outrage.
In the days after an attacker killed three children, Elsie Dot Stancombe (7), Bebe King (6), and Alice da Silva Aguiar (9), and injured ten others during a Taylor Swift-themed event on July 29, 2024, Aintree Hospital treated some of those wounded. An internal audit revealed that 48 staff accessed the victims' records without proper authorization.
Leanne Lucas, who survived and was one of UHLG's patients whose records were improperly viewed, expressed her devastation: "I am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable."
The hospital trust acknowledged the inexcusable breach but did not fire any staff members involved. The incident came to light this week after being reported by Health Service Journal.
This data breach highlights concerns over patient confidentiality, especially during traumatic incidents involving minors.
This article was produced by AVALW News on Friday, May 15, 2026 based on reporting from 5 verified news sources. Our editorial process cross-references facts from multiple independent outlets to deliver accurate, comprehensive coverage. All original sources are linked below.