Staff Dismissed Over Illegal Access to Victims' Medical Records
Nottingham University Hospitals Trust (NUH) has confirmed the dismissal of 11 staff members following an investigation into the unauthorized access of medical records belonging to victims of the June 2023 Nottingham attacks.
Valdo Calocane was responsible for the deaths of two 19-year-old students, Barnaby Webber and Grace O’Malley-Kumar, as well as Ian Coates, a 65-year-old caretaker. He also attempted to kill three other individuals in the city during the attacks.

NUH stated that in addition to the 11 dismissals, 14 other staff members received written warnings but remain employed. The investigation involved a range of personnel including doctors, nurses, registered medical professionals, and administrative staff. The specific roles of those dismissed have not been disclosed.
Families Respond to Breach of Confidentiality
Emma Webber, mother of Barnaby Webber, expressed her dismay at the extent of the misconduct. She challenged the trust's assertion that up to 48 staff members had legitimate reasons to access the victims’ medical files.
Trust Apologizes and Takes Disciplinary Action
Dr Manjeet Shehmar, medical director at NUH, issued an apology to the families affected and emphasized the trust's commitment to addressing the issue. She stated that the disciplinary measures demonstrate a zero-tolerance approach to unauthorized access of patient records.
The families of Barnaby Webber, Grace O’Malley-Kumar, and Ian Coates have been informed about the disciplinary outcomes.
“The families of Ian, Grace and Barnaby have had to endure much pain and heartache, and I am truly sorry that the actions of some of our staff have added to that.
To access the medical records of our patients without a legitimate reason is totally unacceptable and we are doing all we can to identify where and how that has happened. I hope that the families, staff and our communities feel reassured by the outcomes so far, that we are taking this seriously and will continue to do so.”
“It is essential that access to patient records is lawful, justified and directly related to their role. By accessing records inappropriately, staff are damaging the valuable contributions made by those colleagues providing care for those patients. In those cases where it does happen, I hope that this is a very clear reminder that we will take appropriate action.”
Regulatory and Police Involvement
The trust has notified the Information Commissioner’s Office and Nottinghamshire Police regarding the breaches. Further follow-up is planned with independent regulatory bodies including the Nursing and Midwifery Council and the General Medical Council.
Family Statement on Investigation Findings
Emma Webber released a statement expressing shock at the number of staff involved and the ongoing nature of the investigation.
“To learn that 11 staff have been dismissed and 14 faced disciplinary actions is shocking. What is more shocking is the scale of misconduct – 150 members of staff accessed the records. The process is not yet complete so we anticipate these numbers to escalate considerably.
“The trust is also aware that we do not accept their findings that 48 members of staff had legitimate access. The number is far too high. The rationale given for legitimacy does not stack up and we are formally challenging this in order to scrutinise properly.
“It’s heartbreaking that on top of our tragic loss, we’ve also had to face such appalling additional failures by members of staff who should know better. I’d ask them all to consider how they would feel if it was their child or father.”
Ongoing Investigations and Inquiry Participation
Investigations continue into allegations of inappropriate access to the medical records of surviving victims, including Wayne Birkett, Sharon Miller, and Marcin Gawronski.
Dr Shehmar is scheduled to provide evidence later this month at the public inquiry into the Nottingham attacks. The inquiry is examining the events leading up to the attacks as well as the responses and decisions made afterwards.
Perpetrator Sentenced
Valdo Calocane was sentenced in January 2024 to an indefinite hospital order after pleading guilty to manslaughter by diminished responsibility and attempted murder.






