Southport attack victims, survivors and families hit by data breach

An investigation is under way after a data breach involving court files relating to victims, survivors and families of the Southport attack, the Ministry of Justice (MoJ) has said.

The unauthorised access by courts staff was identified during a review of the department's digital systems. For a limited number of people, the information accessed included sensitive and personal data, but the MOJ did not state how many people were affected.

An spokesperson said the MOJ was "appalled", but there was no evidence personal data had been shared with third parties and the Information Commissioner's Office (ICO) had been told.

The prime minister has asked the Lord Chancellor to oversee the matter.

An MOJ source said its independent Data Protection Officer had assessed the matter and found that, for a limited number of people, the information accessed included sensitive and personal data likely to result in a high risk to their rights and freedoms.

Those affected are being notified directly, the department said.

An MOJ spokesperson said: "We are appalled that this happened and recognise the distress it will have caused victims, survivors, and their families.

"We apologise to those affected - unauthorised access to court files is completely unacceptable.

"This is now being investigated urgently, and the prime minister has asked the Lord Chancellor to oversee this.

"All wrongdoing will be met with extremely firm action."

The department said it was also reviewing policies and frameworks covering staff conduct, acceptable use and its fraud response plan.

HM Courts and Tribunals Service and HM Prison and Probation Service are also investigating.

Bebe King, six, Elsie Dot Stancombe, seven, and Alice da Silva Aguiar, nine, were murdered during the attack at a Taylor Swift-themed dance class in Southport on 29 July 2024.

Ten others were physically injured.

The data breach disclosure follows separate cases involving inappropriate or potentially inappropriate access to the medical records of people involved in the attack.

In May, a Liverpool hospital trust admitted nearly 50 staff had inappropriately accessed the records of some victims treated at Aintree Hospital.

North West Ambulance Service later began investigating potential inappropriate access to patient records by some of its staff.

Listen to the best of BBC Radio Merseyside on Sounds and follow BBC Merseyside on Facebook, X, and Instagram. You can also send story ideas via Whatsapp to 0808 100 2230.