A survivor of the Southport attack has condemned NHS hospital workers for 'abusing their position' after it emerged that 48 staff members inappropriately accessed victims' medical records.
Breach of Privacy
Leanne Lucas, the instructor of the Taylor Swift-themed dance workshop where the attack occurred, said her privacy was invaded 'when I was at my most vulnerable'. Three girls – Alice da Silva Aguiar, nine, Bebe King, six, and Elsie Dot Stancombe, seven – were murdered by Axel Rudakubana in July 2024, while 10 others were injured.
An audit by University Hospitals of Liverpool Group, where some victims were treated, revealed that 48 staff accessed records without legitimate reason, according to the Health Service Journal. Patients were only informed this week.
Survivor's Response
Ms Lucas, who now campaigns against knife crime and has waived her anonymity, stated: 'I am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable. Nothing will take away my gratitude to the staff who saved my life, but 48 people not involved in my care abused their position of trust to access the files of victims who have suffered unspeakable trauma.'
She added: 'The decision to keep this from me for almost two years is a new low. I am speaking out as I want this scandal and the attempted cover up by senior management exposed for what it is.'
Legal and Trust Response
Nicola Brook, legal director at Broudie Jackson Canter representing three survivors including Ms Lucas at the Southport Inquiry, said: 'This is a truly unbelievable breach of privacy for victims of one of the most horrific attacks this country has ever seen. This is more than a few bad apples when it was 48 different members of staff who, for no legitimate reason, chose to access vulnerable victims’ records. That speaks to a culture and one that will only change if there are real consequences for those responsible.'
University Hospitals of Liverpool Group reported the incident to the Information Commissioner’s Office in August 2024. Trust chief executive James Sumner said the decision not to inform patients earlier was made after 'taking into consideration the potential psychological impact it may have upon them at the time'. He added: 'We are sincerely sorry for any distress that may have been caused to the patients that were under our care and who trusted us to look after them when they were most vulnerable. Breaches of patient confidentiality are inexcusable and undermine the hard work of those teams who sought to provide the highest standard of care to these patients after they experienced such traumatic and life-changing events.' Staff found to have accessed records inappropriately were subject to HR disciplinary processes.
Rudakubana was jailed for a minimum of 52 years for the murders and attempted murders of eight other children, as well as Ms Lucas and businessman John Hayes.



