--- title: "NHS Chief Condemns Patient Record Snooping | Firevault" description: "Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches#webpage", "url": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches", "name": "NHS Chief Condemns Patient Record Snooping", "description": "Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "NHS Chief Condemns Patient Record Snooping", "item": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "NHS Chief Condemns Patient Record Snooping", "description": "Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping.", "url": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-07-10T05:09:29.328747+00:00", "dateModified": "2026-08-11T21:29:24.285561+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches" }, "inLanguage": "en-GB", "articleSection": "Breach Analysis", "wordCount": 636, "keywords": "Breach Analysis, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "NHS chief Sir Jim Mackey has issued a stern condemnation of medical staff who access patient records out of curiosity, describing such actions as a disgraceful breach of trust and a violation of the law. The warning comes as Cambridge University Hospitals (CUH) launches an investigation into a significant insider breach involving the records of a three-year-old child. What Happened On 8 July 2026,", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview What HappenedWhat Data Was ExposedWhy This MattersThe Offline AlternativeKey TakeawaysShareMore Resources [Knowledge Vault](/learn/knowledge)/ Breach Analysis Breach Analysis · 10 July 2026 # NHS Chief Condemns Patient Record Snooping Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping. ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Mark Fermor Director & Co-Founder, Firevault 4 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches&text=NHS%20Chief%20Condemns%20Patient%20Record%20Snooping%0A%0ASir%20Jim%20Mackey%20has%20warned%2040%20NHS%20workers%20who%20accessed%20a%20child's%20medical%20records.%20Mark%20Fermor%20explains%20how%20air-gapped%20storage%20prevents%20insider%20snooping.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches)[](mailto:?subject=NHS%20Chief%20Condemns%20Patient%20Record%20Snooping&body=Sir%20Jim%20Mackey%20has%20warned%2040%20NHS%20workers%20who%20accessed%20a%20child's%20medical%20records.%20Mark%20Fermor%20explains%20how%20air-gapped%20storage%20prevents%20insider%20snooping.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches) ![An empty hospital corridor at blue hour with a closed steel records cabinet, representing secure offline patient data storage.](/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg) Breach Analysis Article record **Breach Analysis**Category **10 July 2026**Published **4 min read**Reading time **Mark Fermor**Written by An empty hospital corridor at blue hour with a closed steel records cabinet, representing secure offline patient data storage. Why it matters ## What this means for organisations holding critical data Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping. In this analysis 1. 01 [What Happened](#section-0) 2. 02 [What Data Was Exposed](#section-1) 3. 03 [Why This Matters](#section-2) 4. 04 [The Offline Alternative](#section-3) 5. 05 [Key Takeaways](#section-4) **On this page**[What Happened](#section-0)[What Data Was Exposed](#section-1)[Why This Matters](#section-2)[The Offline Alternative](#section-3)[Key Takeaways](#section-4) NHS chief Sir Jim Mackey has issued a stern condemnation of medical staff who access patient records out of curiosity, describing such actions as a disgraceful breach of trust and a violation of the law. The warning comes as Cambridge University Hospitals (CUH) launches an investigation into a significant insider breach involving the records of a three-year-old child. ## What Happened On 8 July 2026, Sir Jim Mackey launched a national NHS campaign to educate employees on the legalities of data access and the severe consequences of misconduct. This initiative follows a series of high-profile incidents across the United Kingdom. Most recently, CUH referred itself to the Information Commissioner''s Office (ICO) after approximately 40 staff members accessed the medical records of a young boy injured in a crocodile pit at Johnson''s Zoo on 18 June 2026. The trust is currently investigating whether these individuals had any valid clinical reason to view the files. This is not an isolated occurrence at the trust, which recently dismissed five other staff members for inappropriate record access. Similar breaches have occurred elsewhere; Nottingham University Hospitals NHS Trust dismissed 11 employees in May 2026 for snooping into the records of the victims of the 2023 Nottingham stabbings. Furthermore, a former healthcare worker was recently cautioned by the ICO for attempting to obtain and sell the medical records of the Princess of Wales. ## What Data Was Exposed The breaches involve sensitive medical histories, treatment plans, and personal identification details of patients. In the case of the CUH incident, the private medical data of a minor was exposed to dozens of unauthorised viewers. Such data is highly sensitive and protected under strict confidentiality laws, yet it remains vulnerable to "insider curiosity" where staff use their legitimate credentials to view high-profile or sensational cases. ## Why This Matters When staff members abuse their access rights, it undermines the fundamental relationship between the patient and the healthcare provider. Chris Dzikiti of the Nursing and Midwifery Council noted that confidentiality is a cornerstone of professional practice. Beyond professional disciplinary action, these breaches can lead to criminal prosecutions by the police and the ICO. "The human element remains the most unpredictable threat vector in data security," says Mark Fermor, co-founder of Firevault. "Technical safeguards like multi-factor authentication are essential, but they cannot always prevent a motivated insider with valid credentials from browsing sensitive files. This trend of curiosity-driven breaches proves that even the most trusted environments are at risk when data is constantly available on a live network." ## The Offline Alternative To mitigate the risks of insider snooping and mass data exposure, organisations must reconsider how and where sensitive archives are stored. Firevault provides a robust solution through Layer 1 [physical air gap](/offline-secure-storage/what-is-oss) storage. By keeping data physically disconnected from the network when it is not in active use, Firevault ensures that sensitive records are not available for casual browsing by unauthorised staff or external hackers. Mark Fermor explains that the Firevault approach removes the constant "online" temptation. "If sensitive patient archives are stored in a physically isolated environment, they cannot be accessed on a whim. Our air-gapped technology ensures that data is only accessible when specifically required, providing a definitive barrier against both malicious intent and misplaced curiosity." ## Key Takeaways - **Insider threats are pervasive** as demonstrated by the 40 staff members who inappropriately accessed a child''s medical records at Cambridge University Hospitals. - **Severe consequences await offenders** including summary dismissal, permanent loss of professional registration, and potential criminal prosecution. - **High-profile cases attract snooping** with recent breaches involving victims of violent crime and members of the Royal Family. - **Technical safeguards are insufficient** on their own, as they do not stop authorised users from acting outside of their professional remit. - **Air-gapped storage offers protection** by removing sensitive data from the live network, thereby preventing unauthorised viewing and ensuring long-term data integrity. About the author ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Physical disconnection removes the path an attacker needs Offline Secure Storage® holds a clean copy of your data on hardware that is physically disconnected, so an intrusion cannot reach it, encrypt it or delete it. [Get started](/get-started)[Talk to the team](/demo) **Hardware**Your data sits on dedicated encrypted hardware **Disconnect**Offline by default, connected only when you say so **Command**Access windows and retrieval under your control **Location**Held in a secure Firevault Bunker Related Reading ## You may also find these useful [ ![AnMed Closes Facilities Following Ransomware Attack and Data Claims](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/anmed-facility-closures-following-ransomware-cyberattack-1786723492583.png) Breach Analysis ### AnMed Closes Facilities Following Ransomware Attack and Data Claims South Carolina health system AnMed was forced to close 83 facilities following a cyberattack. Threat actors subsequently claimed to hold 6 terabytes of sensitive patient records. 14 Aug 2026 4 min ](/news/anmed-facility-closures-following-ransomware-cyberattack)[ ![US directive allows private firms to conduct offensive cyber operations](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/us-directive-private-firms-offensive-cyber-operations-1786723418300.png) Breach Analysis ### US directive allows private firms to conduct offensive cyber operations US President Donald Trump has signed a memorandum permitting private firms to execute offensive cyber operations. The move raises new risks of retaliatory attacks and collateral system disruptions. 14 Aug 2026 3 min ](/news/us-directive-private-firms-offensive-cyber-operations)[ ![Adobe Commerce attacked immediately after session breach vulnerability](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/adobe-commerce-session-vulnerability-exploited-after-disclosure-1786684691416.png) Breach Analysis ### Adobe Commerce attacked immediately after session breach vulnerability Security firm Sansec blocked attacks targeting Adobe Commerce immediately after disclosure. The flaw allows unauthenticated attackers to hijack sessions and customer data. 14 Aug 2026 4 min ](/news/adobe-commerce-session-vulnerability-exploited-after-disclosure)[ ![Cornelius faces legal investigation after alleged Cl0p cyber attack](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/cornelius-alleged-clop-ransomware-data-breach-1786684482605.png) Breach Analysis ### Cornelius faces legal investigation after alleged Cl0p cyber attack Cornelius faces legal scrutiny following reports of a Cl0p ransomware breach in August 2026. Claims suggest thousands of gigabytes of corporate data were compromised. 14 Aug 2026 4 min ](/news/cornelius-alleged-clop-ransomware-data-breach)[ ![Rogue Wi-Fi at 35,000 Feet: What the Delta Flight 591 Incident Teaches About Network Trust](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Fdelta-rogue-wifi-defcon-2026.jpg) Breach Analysis ### Rogue Wi-Fi at 35,000 Feet: What the Delta Flight 591 Incident Teaches About Network Trust Delta Air Lines is investigating an unauthorised Wi-Fi network broadcast aboard Flight 591 from Las Vegas to Atlanta, alongside a deauthentication attack that knocked passengers off the aircraft network. The lesson is not about aviation. It is about how easily a trusted connection can be impersonated. 13 Aug 2026 4 min ](/news/delta-flight-rogue-wifi-deauth-attack-def-con-2026)[ ![Ransomware Attacks Spike 20% in July While AI Steals the Headlines](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Fransomware-spike-ai-distraction.jpg) Breach Analysis ### Ransomware Attacks Spike 20% in July While AI Steals the Headlines Ransomware attacks jumped nearly 20 per cent in July, with 799 incidents logged globally. While AI dominates security headlines, finance, technology, pharmaceutical, medical billing and education organisations absorbed the sharpest increases. 12 Aug 2026 4 min ](/news/ransomware-attacks-spike-july-2026-ai-distraction) Share this article Breach Analysis 10 July 2026 4 min read ## NHS Chief Condemns Patient Record Snooping Sir Jim Mackey has warned 40 NHS workers who accessed a child's medical records. Mark Fermor explains how air-gapped storage prevents insider snooping. ![NHS Chief Condemns Patient Record Snooping](/__l5e/assets-v1/3aad6c97-a50a-4d76-8f69-9e319d6723f6/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches-1752163200000-2x.jpg) ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Published by Mark Fermor , Director & Co-Founder Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches&text=NHS%20Chief%20Condemns%20Patient%20Record%20Snooping%0A%0ASir%20Jim%20Mackey%20has%20warned%2040%20NHS%20workers%20who%20accessed%20a%20child's%20medical%20records.%20Mark%20Fermor%20explains%20how%20air-gapped%20storage%20prevents%20insider%20snooping.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches)[](mailto:?subject=NHS%20Chief%20Condemns%20Patient%20Record%20Snooping&body=Sir%20Jim%20Mackey%20has%20warned%2040%20NHS%20workers%20who%20accessed%20a%20child's%20medical%20records.%20Mark%20Fermor%20explains%20how%20air-gapped%20storage%20prevents%20insider%20snooping.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fnhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches) [Read full article](https://fire-vault.com/news/nhs-chief-condemns-staff-curiosity-after-major-patient-privacy-breaches) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/offline-secure-storage/what-is-oss) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)