UK Ministry of Justice Faces Scrutiny Over Data Breach Affecting Southport Attack Victims

The UK Ministry of Justice (MOJ) has launched an urgent investigation into a data breach that compromised sensitive personal information of victims, survivors, and their families connected to the Southport attack. An MOJ spokesperson stated, "We are appalled that this happened and recognise the distress it will have caused victims, survivors, and their families." The department extended an apology, deeming the unauthorized access to court files "completely unacceptable."

The Prime Minister has tasked the Lord Chancellor with overseeing the investigation, and assurances have been made that "all wrongdoing will be met with extremely firm action." In response to the incident, the MOJ is also reviewing its policies and frameworks concerning staff conduct, acceptable use of systems, and its fraud response plan. Both HM Courts and Tribunals Service and HM Prison and Probation Service are conducting their own investigations into the matter.

The Southport attack, which occurred on July 29, 2024, resulted in the deaths of six-year-old Bebe King, seven-year-old Elsie Dot Stancombe, and nine-year-old Alice da Silva Aguiar during a dance class. Ten other individuals sustained physical injuries.

This data breach disclosure follows a series of separate incidents involving improper access to the medical records of individuals involved in the attack. In May, a Liverpool hospital trust admitted that nearly 50 staff members had inappropriately accessed the records of some victims treated at Aintree Hospital. Additionally, the North West Ambulance Service initiated its own investigation into potential inappropriate access to patient records by some of its staff.