NHS trust removes 10 staff from active duty over Noah Woods data breach investigation

An NHS trust has removed 10 employees from active duty while investigations are carried out into a data breach of a three-year-old's medical records.

Noah Woods was found dead in a lake following a huge search after he left a play area through a gap in a fence.

East Suffolk and North Essex NHS Foundation Trust launched an investigation and apologised "unreservedly" to the boy's family for the "extra anguish" it caused after the data breach.

Dr Martin Mansfield, deputy chief medical officer at East Suffolk and North Essex NHS Foundation Trust, said in a statement that any unauthorised access of patient data is "completely unacceptable".

The statement said: "We understand the significant distress it can cause patients and their families. It also undermines trust in our services. Safeguarding that trust is central to the care we provide.

"We have apologised unreservedly to Noah Woods' family for the extra anguish this breach of trust has caused them at an already devastating time."

It continued: "As soon as we became aware of concerns that Noah's medical records may have been viewed inappropriately, we launched an urgent internal investigation.

"Immediate steps were also taken to secure the records and prevent further access that was not for a legitimate, clinical reason."

The trust said it has reported the matter to the Information Commissioner's Office, and will continue to keep Noah's family informed as its investigation progresses.

The statement added: "We take any patient data breach seriously. We investigate thoroughly, and we will take disciplinary action where needed in response to our findings, in line with the trust's policies and procedures."

More from Sky News:
Heathrow third runway delayed for four years
Expert advises 'scepticism' over AI fears

Noah, three, was found dead in a lake following a massive search after he left a play area through a gap in a fence, an inquest heard.

He had left an under-fives play area in Brantham, Suffolk, and became separated from the relative who was with him on 15 September, the inquest was told.

About 1,300 members of the public joined a search to find the youngster, but Met Police divers recovered his body from a lake known locally as Decoy Pond the following afternoon.

After Friday's hearing, which was opened then adjourned to a date to be fixed, Noah's family released a tribute to him through Suffolk Police.

They said: "Noah was a happy, cheeky, playful three-year-old boy who loved to laugh, loved to giggle and who brought joy wherever he went.

"He was part of a loving and caring family, living with his mummy, daddy and his little baby brother. He was at the centre of our world."

The NHS trust's apology comes as NHS staff have been warned they face immediate suspension if they are caught inappropriately accessing patient information.

NHS England chief executive Sir Jim Mackey wrote to NHS Trust leaders, saying: "We have seen too many cases of people abusing that trust, and enough is enough.

"If someone is suspected of snooping, we cannot leave them in post with access to patients' records while an investigation takes days or weeks.

"From now on, we will expect them to be suspended and have their access to NHS systems cut off immediately, while the facts are established."

This urgent intervention follows a Sky News investigation exposing the scale of the problem in the health service.

Southport attack survivor Leanne Lucas had her medical records inappropriately accessed and was not told by the hospital until two years after the breach.

Responding to the move, she told Sky News: "I'm really pleased to see that people in these positions have listened to us and they're taking it seriously."

(c) Sky News 2026: NHS trust removes 10 staff from active duty over Noah Woods data breach investigation