Southport survivor 'violated' by 'morbid curiosity'

BBC Leanne Lucas, who has long wavy dark hair, and is wearing a white T-shirt with a circular logo with the catchphrase 'Let's Be Blunt' on the front. She is standing in a kitchen looking into the camera with a determined expression.BBC
Leanne Lucas was critically injured and required multiple surgeries after the attack

A yoga teacher who was seriously injured in the Southport knife attack has said she feels "violated" by the "inexcusable morbid curiosity" of NHS staff who allegedly accessed her medical records inappropriately.

Leanne Lucas was helping to run a Taylor Swift-themed dance class when Bebe King, six, Elsie Dot Stancombe, seven, and nine-year-old Alice Da Silva Aguiar were fatally attacked in the Merseyside town on 29 July 2024.

Lucas, who was one of two adults hurt along with eight other children, spoke out after news emerged that two more NHS staff were under investigation over allegations they inappropriately accessed Southport victims' medical records.

The latest cases were identified by Liverpool Heart and Chest Hospital in a "retrospective audit".

PA Media Bunches of flowers and teddies lined up against a wall next to a road sign reading Tithebarn Road in Southport.PA Media
Knifeman Axel Rudakubana attacked people at a children's dance class in Southport on 29 July 2024

In May, the University Hospitals of Liverpool Group (UHLG) admitted that nearly 50 of its staff had wrongly looked at victims' medical files.

The group runs Aintree Hospital in Liverpool, where some of the survivors of the attack were taken.

Lucas said: "What happened to me was already traumatic enough, but to discover that the very people entrusted with my care have violated my privacy causes further distress and secondary trauma.

"I should not have to fight for answers or accountability from a hospital where I was at my most vulnerable.

"Time and time again I've been placed in this position, driven by what I can only assume is an inexcusable morbid curiosity by medical staff trained and employed to care [for] and protect patients."

Lucas's solicitors confirmed that they had asked for an audit to be conducted by the hospital in September.

Elaine Macdonald, a solicitor at Broudie Jackson Canter, is representing Lucas.

She said: "Leanne has already suffered the indignity of at least 40 members of medical staff inappropriately accessing her medical records during her care at a hospital under the same trust.

"She is now being told that it may not have ended there. Each breach erodes her trust and is a clear violation of her privacy, when she was at her most vulnerable. This is a systemic issue that needs to be addressed urgently."

A separate investigation is also being held at North West Ambulance Service Trust in relation to staff looking up the victims of the attack without authorisation.

Liverpool Heart and Chest Hospital said it was "carrying out an investigation into two potential instances of inappropriate access connected to the Southport incident".

It added: "The cases were detected as part of retrospective audit and two members of staff have been placed on precautionary suspension whilst an investigation is concluded."

It said the case had been reported to the Information Commissioner's Office and the health regulator the Care Quality Commission.

The trust's medical director Manoj Kuduvalli said: "We are deeply sorry that this has happened.

"Our patients trust us with their most personal information at some of the most vulnerable moments in their lives, and any inappropriate access to those records is a serious violation of that trust.

"We have been clear with all colleagues that patient records must only ever be accessed for legitimate reasons connected to their role and the patient's care.

"We will not accept behaviour that compromises patient confidentiality or undermines the trust our patients place in us.

"We have spoken to those that are affected and will keep them informed as our investigation continues."

Sign which reads Aintree NHS University Hospital showing vehicles driving in and out of the hospital site
The three patients affected by the previously reported breach were all treated at Aintree University Hospital

The data breach at UHLG happened at Aintree Hospital in Liverpool, where some of those injured were treated, in the days after the 29 July 2024 attack.

The BBC understands the three patients affected included Leanne Lucas and a 13-year-old girl who had been helping to supervise the dance class.

In May, UHLG described the breach as "inexcusable" and stressed that changes had been made, although no-one had been sacked.

Listen to the best of BBC Radio Merseyside on Sounds and follow BBC Merseyside on Facebook, X, and Instagram. You can also send story ideas via Whatsapp to 0808 100 2230.