Hospital trust facing fresh questions after dozens of staff access Southport Attack victims' records

The data breach was uncovered when meeting notes were accidentally published online

Hello and welcome to The Southport Lead.

The sheer number of victims of the Southport Attack meant that they were taken to multiple hospitals across the region. Almost two years on, it has been made public - thanks to excellent journalism from the HSJ - that dozens of staff at Aintree University Hospitals searched up the records of victims treated there when they had no reason to do so.

What’s more, leaders at the trust decided against telling those involved - a decision which has sparked further anger. The matter was however referred to various regulatory bodies and today’s edition looks at the responses from those groups as well as the impact on those involved.

---

Southport briefing

🚨 A lorry driver died after crashing into a house in Banks. The tragic incident occurred at around 7.30am on Thursday when the HGV crashed into a home on Long Lane, near its junction with Chapel Lane and Bond’s Lane. Nobody in the house was harmed. A spokesperson for Lancashire Police said: “It was reported that a HGV collided with a house. Thankfully, no one in the house suffered any injuries. Emergency services attended and, very sadly, despite the best efforts of emergency services a man in his 50s died at the scene. His death is not being treated as suspicious and a file will be passed to the coroner in due course. If you witnessed this incident, have any CCTV/dashcam/doorbell footage, please call 101 quoting log 318 of 28th May.”

🚓 A Porsche driver fled the scene after a crash with a bus which left an bus passenger badly hurt. The crash occurred at 12.55pm on Wednesday in Birkdale Village, near Cove, and the woman remains in hospital with serious injuries. The Porsche driver failed to stop and police are now appealing for information. Detective Sergeant Kurt Timpson said: “In particular, I am keen to speak to anyone who saw the incident or the build up to it. I know that there were a large number of people in the area at the time, including pedestrians and motorists. I also appeal to local residents and businesses who may have CCTV systems and who have not yet spoken to my officers to review their footage. If you believe that you have captured the incident, please get in touch. Equally I also appeal to anyone who was in the locality at the time who may have dash cam in their vehicles. Both front and rear cameras can often record vital evidence without the driver being aware. Please review your systems and again I appeal for you to get in touch if you can help”. Anyone with information is asked to contact police on 0151 777 5747, email: sciu@merseyside.police.uk, or via @MerPolCC on social media with reference 26000423261

📱 Sefton Council has launched a virtual family hub which it says will allow people to access trusted advice, guidance and support services in one place. Named Family Life Toolkit, the portal is available online or via an app and brings together a wide range of information for parents, carers, children and young people on subjects including early years support, health services, education, SEND, and parenting advice. It also includes an integrated booking system to allow families to browse and book onto local services, activities and support sessions directly through the platform, removing the need to navigate multiple systems and a live chat function. Cllr Diane Roscoe, Cabinet Member for Children, Schools and Families, said: “We know that families want clear, reliable and easy-to-access information, and this new family friendly platform delivers exactly that. By bringing services together in one place, we are helping families get the support they need more quickly and confidently.”

Have a story you think we should be featuring or digging into? Tip-offs and info welcome to jamie@thelead.uk

---

Hospital trust facing fresh questions after dozens of staff access Southport Attack victims’ record

Aintree University Hospital

By Jamie Lopez

The hospital trust where dozens of staff accessed the records of Southport Attack victims is facing further questions from regulators.

Some of the victims - both adults and children - were taken to Aintree Hospital for emergency care when they suffered injuries in the attack and in the aftermath, some 48 employees at University Hospitals of Liverpool Group (UHLG) were found to have searched up records with no legitimate reason to do so.

The trust uncovered this during a routine audit and says it has taken disciplinary action but decided against telling the families of those involved. Instead, the information was only made public when the trust accidentally published the unredacted details of an upcoming board meeting onto its website and the information was seen by Zoe Tidman, a reporter from the Health Social Journal (HSJ).

UHLG said it had reported the data breach to authorities including the Information Commissioners Office (ICO) and the Care Quality Commission (CQC) but had decided against telling the victims on the basis the information may retraumatise them. It is understood that, unlike when similar occurred after the Nottingham Attack, none of those who faced disciplinary action have lost their jobs as a result.

Among those who had their files accessed was adult survivor Leanne Lucas. She told the HSJ: “I am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable. Nothing will take away my gratitude to the staff who saved my life, but 48 people not involved in my care abused their position of trust to access the files of victims who have suffered unspeakable trauma. The decision to keep this from me for almost two years is a new low. I am speaking out as I want this scandal and the attempted cover-up by senior management exposed for what it is.”

The ICO has now told The Southport Lead that it is not planning any criminal investigation against those involved but will consider it if any new information emerges. Meanwhile, the CQC says it will be monitoring the trust’s own review of whether it complied with its own legal obligation for a duty of candour to the patients.

A CQC spokesperson said: “The trust reported the data breach to the Information Commissioners Office (ICO) and also notified CQC, NMC and the local Integrated Care Board (ICB). We were kept informed of the immediate action taken by the trust to prevent any further access to patient records without legitimate reason and to manage the matter in line with its internal policies.