East Suffolk and North Essex NHS Foundation Trust has suspended or removed 10 staff members from duty following a data breach involving the digital medical records of three-year-old Noah Woods, who was found dead in a Suffolk pond on 16 September 2026. The trust has apologised unreservedly to the family and reported the incident to the Information Commissioner's Office. The breach comes amid warnings from NHS England chief executive Sir Jim Mackey that staff snooping on patient records will face immediate suspension.
Disappearance and death of Noah Woods
- ▪Assistant coroner Jyoti Gill opened and adjourned the inquest into Noah Woods' death in Ipswich on Friday, 25 September 2026.
- ▪Police divers recovered Noah Woods' body from a pond in Brantham, Suffolk, on 16 September 2026, and Suffolk Constabulary stated his death was not being treated as suspicious.
- ▪At least 1,300 members of the public joined emergency services in the search for Noah Woods in the 24 hours before his body was found.
- ▪Three-year-old Noah Woods went missing on 15 September 2026 in Brantham, Suffolk, after escaping from a playground through a gap in a fence.
Breach and securing of medical records
- ▪East Suffolk and North Essex NHS Foundation Trust launched an urgent internal investigation and, as stated by deputy director of communications Anna Turner, made Noah Woods' medical records impossible to find to prevent further unauthorised access.
- ▪Unauthorised individuals accessed the digital medical records of three-year-old Noah Woods following the child's disappearance in September 2026.
Suspensions and apology by the trust
- ▪Ten employees of East Suffolk and North Essex NHS Foundation Trust were suspended or removed from active duty pending investigations into the unauthorised access of Noah Woods' medical records.
- ▪Dr. Martin Mansfield, deputy chief medical officer at East Suffolk and North Essex NHS Foundation Trust, apologised unreservedly to Noah Woods' family for the anguish caused by the data breach.
Trust staff communication and training
- ▪East Suffolk and North Essex NHS Foundation Trust wrote to all staff on Saturday, 26 September 2026, to inform them of the data breach and emphasize that swift action was being taken.
- ▪Dr. Martin Mansfield stated that East Suffolk and North Essex NHS Foundation Trust provides regular staff training and updates on information governance throughout the year.
Wider concerns over NHS data breaches
- ▪Sir Jim Mackey, chief executive of NHS England, wrote to all NHS trusts on Friday, 25 September 2026, ordering stronger measures to tackle data breaches and warning of immediate suspensions for staff snooping on records.
- ▪Unauthorised access to patient records by NHS staff occurred in previous high-profile cases, including the 2023 Nottingham attacks and the 2024 Southport dance class knife attack.
- ▪The Information Commissioner's Office stated that a series of recent high-profile incidents involving unauthorised access to patient records is painting an extremely worrying picture.
Debatable claims
- ▪NHS trusts bear more responsibility for patient data breaches than the individual staff who access them
- ▪Criminal prosecution is a proportionate response for NHS staff who snoop on patient records
- ▪NHS England should immediately suspend any staff member suspected of snooping on patient records
- ▪Technical restrictions are more effective at protecting NHS patient data than staff training
Story comments
Loading comments…