Up to 40 hospital staff have accessed the medical records of the little boy thrown in to a crocodile pit by a stranger, it was revealed today, sparking a major investigation.The three-year-old was left fighting for his life after being hurled from a viewing platform in to the reptile enclosure at Johnsons of Old Hurst zoo, near Huntingdon in Cambridgeshire, last week.The child suffered a shattered arm and pelvis after landing on concrete and being bitten by at least one saltwater crocodile – the animal with the world’s strongest bite.His bereft mother, who also had a baby with her, watched in horror as a man picked up her son and hurled him 15ft down into an area of the zoo with at least 15 crocodiles and alligators last Thursday.He is now in a stable condition at Addenbrooke’s Hospital in Cambridge. But bosses today revealed his medical record have been accessed by up to 40 members of staff since he was admitted.They have vowed to take ‘robust disciplinary action’ against anyone found to have accessed the records without a genuine clinical reason.The case comes after hospital staff were found to have viewed the medical records of the Princess of Wales following her cancer diagnosis.NHS workers also accessed the records of victims of the terror attacks in Southport and Nottingham. At least 12 people were sacked and more than 50 were disciplined.Now dozens of NHS staff have been found to have viewed the records of the boy who was attacked by a stranger and then by crocodiles eight days ago.A spokesman for Cambridge University Hospitals said: ‘Where any member of staff is found to have accessed patient records without legitimate clinical or operational reasons, we take robust disciplinary action.’ The three-year-old boy was left fighting for his life after being bitten by a saltwater crocodile when he was thrown down into the enclosure (pictured) at Johnsons of Old Hurst near Huntingdon last week