Southport Attack Victims’ Court Files Accessed In Data Breach

Southport Attack Victims’ Court Files Accessed in Data Breach

An investigation has been launched after court files containing information about victims, survivors and families of the 2024 Southport attack were accessed without authorisation, the UK Ministry of Justice MoJ has said. The breach involved sensitive personal information belonging to a limited number of people. The ministry said there was no evidence that the information had been shared with third parties. The data breach was discovered during a review of the Ministry of Justice’s digital systems. The ministry said the files were accessed by court staff without approval and that the incident was now the subject of an urgent investigation. The MoJ apologised to those affected, acknowledging the distress the incident could cause victims, survivors and their families. The Information Commissioner’s Office ICO, the UK data protection regulator, has also been informed. Officials said that, for a limited number of people, the material accessed included sensitive personal data considered capable of posing a high risk to their rights and freedoms. The ministry has not publicly disclosed how many staff members accessed the files or how many people were affected. Families of victims and survivors are being contacted directly about the breach. The investigation is being handled by HM Courts and Tribunals Service and HM Prison and Probation Service, while the Lord Chancellor has been asked to oversee the response. The breach has caused renewed distress among families connected to the attack. The parents of one surviving child said their family had been affected by two separate data-breach investigations in recent weeks, after concerns were also raised over access to victims’ medical records by staff at the North West Ambulance Service. Lawyers representing many of the surviving children have called for greater scrutiny of how sensitive information relating to the victims has been handled by public bodies. The data breach relates to the attack at a Taylor Swift-themed dance class in Southport on July 29, 2024. Three children six-year-old Bebe King, seven-year-old Elsie Dot Stancombe and nine-year-old Alice da Silva Aguiar were killed. Eight other children and two adults were injured. Axel Rudakubana was subsequently convicted and sentenced to a minimum of 52 years in prison. The attack led to widespread public concern and unrest across the UK, while a later public inquiry examined the circumstances and institutional failures surrounding the case. The latest incident follows separate concerns over the handling of victims’ medical information. The North West Ambulance Service has investigated allegations that some staff accessed medical records relating to people affected by the attack. Separately, almost 50 staff members at Aintree University Hospital were previously found to have inappropriately accessed medical records belonging to some victims. The Ministry of Justice said it would take firm action if wrongdoing is established as the investigation continues.