Valdo Calocane killed Barnaby Webber, Grace O’Malley-Kumar, and Ian Coates, and attempted to kill three other people in June 202317:16, 21 May 2026An NHS trust has sacked 11 members of staff who illegally accessed the medical records of the victims of the Nottingham attacks.‌Valdo Calocane killed two 19-year-old students, Barnaby Webber and Grace O’Malley-Kumar, and Ian Coates, a 65-year-old caretaker, and attempted to kill three other people in June 2023.‌Nottingham university hospitals NHS trust (NUH) confirmed the staff had been dismissed as part of an investigation into claims the victims’ medical files were inappropriately accessed.‌A further 14 staff members have been disciplined with written warnings but remain in post. Staff investigated included doctors, nurses, registered medical professionals and administrators. The roles of those dismissed have not been made public.Emma Webber, the mother of Barnaby Webber, said: “To learn that 11 staff have been dismissed and 14 faced disciplinary actions is shocking. What is more shocking is the scale of misconduct - 150 members of staff accessed the records. The process is not yet complete so we anticipate these numbers to escalate considerably.‌“The trust is also aware that we do not accept their findings that 48 members of staff had legitimate access. The number is far too high. The rationale given for legitimacy does not stack up and we are formally challenging this in order to scrutinise properly.“It’s heartbreaking that on top of our tragic loss, we’ve also had to face such appalling additional failures by members of staff who should know better. I’d ask them all to consider how they would feel if it was their child or father.”‌Dr Manjeet Shehmar, medical director at NUH, apologised to the victims’ families and said the disciplinary action showed that the trust would not tolerate prying into medical records.She said: “The families of Ian, Grace and Barnaby have had to endure much pain and heartache, and I am truly sorry that the actions of some of our staff have added to that.“To access the medical records of our patients without a legitimate reason is totally unacceptable and we are doing all we can to identify where and how that has happened. I hope that the families, staff and our communities feel reassured by the outcomes so far, that we are taking this seriously and will continue to do so.”‌She added: “It is essential that access to patient records is lawful, justified and directly related to their role. By accessing records inappropriately, staff are damaging the valuable contributions made by those colleagues providing care for those patients. In those cases where it does happen, I hope that this is a very clear reminder that we will take appropriate action.”The trust has also informed the Information Commissioner’s Office and Nottinghamshire police. It said follow-up activity would take place with independent regulators such as the Nursing and Midwifery Council and the General Medical Council.Calocane was sentenced to an indefinite hospital order in January 2024 after admitting manslaughter by diminished responsibility and attempted murder.‌Last week hospital staff at the University Hospitals of Liverpool Group were accused of a “new low” after it emerged 48 staff had accessed the medical records of victims of the Southport attack without good reason.Bebe King, six, Elsie Dot Stancombe, seven, and Alice da Silva Aguiar, nine, were killed at a Taylor Swift-themed dance event on July 29, 2024.‌Ten others were seriously injured after being stabbed by maniac Axel Rudakubana, now 19, who was sentenced to a minimum of 52 years in prison.Some of the injured were treated at University Hospitals of Liverpool Group. Dance class teacher Leanne Lucas, who survived the attack, was one of UHLG patients whose records were inappropriately accessed.‌She said: “I am absolutely devastated and horrified that my privacy has been invaded when I was at my most vulnerable. Nothing will take away my gratitude to the staff who saved my life, but 48 people not involved in my care abused their position of trust to access the files of victims who have suffered unspeakable trauma.“The decision to keep this from me for almost two years is a new low. I am speaking out as I want this scandal and the attempted cover up by senior management exposed for what it is.”The trust board chose not to tell those involved about the breach after directors decided that informing the patients would not be in their best interests, as it risked retraumatising them.‌Nicola Brook, a Legal Director at Broudie Jackson Canter, who represent three survivors including Leanne at the Southport Inquiry, said: “This is a truly unbelievable breach of privacy for victims of one of the most horrific attacks this country has ever seen. This is more than a few bad apples when it was 48 different members of staff who for no legitimate reason, chose to access vulnerable victims’ records.”Nicola Ryan-Donnelly of Fletchers Solicitors, which represents nearly all the surviving children, said: “This is a deeply disturbing abuse of power and a shocking breach of privacy into the care of several Southport victims, including a young girl. It is absolutely shameful that the Trust have known about this gross breach since a few days after the attack, yet have sought to keep it from the survivors and their families until almost two years later.UHLG chief executive James Sumner issued a formal apology to the victims saying: “We are sincerely sorry for any distress that may have been caused to the patients that were under our care and who trusted us to look after them when they were most vulnerable.Article continues below“Breaches of patient confidentiality are inexcusable and undermine the hard work of those teams who sought to provide the highest standard of care to these patients after they experienced such traumatic and life-changing events. Staff who were found to access patient records were subject to HR disciplinary processes.”He said the trust had notified the relevant regulators and professional bodies, including the Information Commissioner’s Office, and “were fully transparent about any findings and actions taken”.