Cambridge University Hospitals Reports Patient Data Breach After Staff Access Crocodile Attack Victim’s Records Cambridge University Hospitals (CUH) has self-reported a data breach to the UK’s Information Commissioner’s Office (ICO) after staff inappropriately accessed the medical records of a three-year-old boy injured in a crocodile attack. The incident occurred on 18 June, when the child was rushed to Addenbrooke’s Hospital following severe injuries sustained after allegedly being thrown into a crocodile enclosure at Johnsons of Old Hurst, a wildlife park in Cambridgeshire. A CUH spokesperson confirmed that while the hospital maintains strict data protection policies, a breach had occurred. The trust, which employs 13,000 staff, emphasized that unauthorized access to patient records without clinical or operational justification results in disciplinary action, including dismissal. As part of its response, CUH has notified the ICO and issued apologies to the affected family. The Department of Health and Social Care condemned the breach, stating that inappropriate access to health records is unacceptable and that the trust must conduct a full investigation. The department is also reviewing the incident to prevent future occurrences. The ICO, which is assessing the report, highlighted the broader issue of unauthorized medical record access across the health sector. An ICO spokesperson stressed that patient trust depends on strict confidentiality, particularly in sensitive cases involving children. The regulator is collaborating with the National Data Guardian and NHS England to reinforce data security measures and remind organizations of their obligations. The incident underscores ongoing challenges in healthcare data protection, with regulators and authorities treating the matter as a priority.