The number of workers at a Nottingham hospital who have looked at the medical files of victims from the Nottingham attacks has risen to 150, with bereaved families describing their conduct as abhorrent. Nottingham University Hospital Trust, which runs the Queen’s Medical Centre and Nottingham City Hospital, is still investigating staff members who may have improperly accessed the records of Barnaby Webber, Grace O’Malley-Kumar and Ian Coates. The two 19-year-old University of Nottingham students and the 65-year-old Nottingham grandfather were all fatally attacked by Valdo Calocane in the early hours of 13 June 2023. A public inquiry into these deaths continues, with one of the key issues being the unauthorized access to documents and footage related to the attacks by employees of various agencies. Nottinghamshire Police has only recently agreed to launch a new investigation into all officers who may have viewed CCTV footage of the attacks without legitimate policing reasons. The trust has now confirmed that the number of its employees who viewed the victims’ medical records has reached 150, compared to the last publicly reported figure of 91 in March 2025 by the BBC. The investigation only began after the bereaved families requested an audit of Nottinghamshire Healthcare NHS Foundation Trust to determine who had accessed Calocane’s records at that organization. An irregularity discovered during that audit indicated that Queen’s Medical Centre staff may have viewed the files of Barnaby, Grace and Ian, and the healthcare trust reported this to NUH. NUH’s investigation is understood to be proceeding in two phases, with the first evaluating everyone who viewed the files and the second focusing on those who may have done so unlawfully. According to Nottinghamshire Live, the investigation is now examining approximately 100 employees in phase two, although the victims’ families question whether 50 staff members would have had any legitimate reason to access their loved ones’ records. The families met with senior trust representatives at a meeting in January. NUH declined to confirm how many employees have progressed to phase two, though the victims’ families state this is the number they have been provided. The bereaved families insisted on a complete audit of NUH staff who viewed the records, after the trust initially planned only a sample review. Dr. Manjeet Shehmar, NUH’s Medical Director, addressed the rising figure by saying the trust recognizes the impact this unacceptable data breach has had on the families and apologizes for the pain these actions have caused. Sanjoy Kumar, Grace O’Malley-Kumar’s father, responded to such an apology by stating that for his wife and himself particularly, the trust staff’s actions have been deeply hurtful. He explained that their daughter Grace was a medical student who attended Queen’s Medical Centre for lectures and would have one day become a doctor and a colleague there, beginning her career in the NHS. From their perspective, the process so far represents the Trust marking its own homework, and any apology offered to date seems procedural rather than meaningful. Emma Webber, Barnaby Webber’s mother, said that QMC hospital has failed. They have failed Barney, Grace and Ian and failed all of their bereaved and heartbroken families. Because of their insistence, a records audit revealed 150 staff members at all levels within the trust accessed their medical records. Given that none of the three received any care due to the brutality of Valdo Calocane, it is clear the motivation for the vast majority was nothing more than abhorrent voyeurism. Despite the hospital’s assurances, they are not satisfied with how they have conducted their investigation, nor with the time it is taking. They sincerely doubt the legitimacy of findings that 50 staff members had legitimate need. The rationale and details they have provided for this group do not make sense. Of the remaining 100 staff, they await the findings and will ensure they can scrutinize the fact-finding, processes and decisions to meet their expectations. The investigations are expected to conclude by the end of April. Dr. Shehmar affirmed that the trust would take any necessary action following a thorough investigation, adding that accessing data and records of any kind without valid reason is totally unacceptable, and they are doing everything they can to identify wrongdoing through a comprehensive and professional investigation. The families and their communities can be assured that they will not hesitate to take appropriate action where this is found to be the case.