Investigation launched as NHS trust apologises for Noah Woods data breach
An NHS trust has apologised after three-year-old Noah Woods's medical records were accessed without authorisation, suspending 10 staff as it investigates. The case follows a major search and the discovery of his body in a pond near Brantham, Suffolk.
Written by Roundtablefrom 2 outlets' reporting

01What happened
Three-year-old Noah Woods went missing from a playground in Brantham, Suffolk, on 15 September. His body was found in water the next day by police divers. An inquest opened and adjourned in Ipswich heard he left the play area through a gap in the fence. The East Suffolk and North Essex NHS Foundation Trust apologised after his medical records were accessed without authorisation, launched an urgent investigation, secured the records, and reported the breach to the Information Commissioner's Office. Dr Martin Mansfield, deputy chief medical officer at the trust, said unauthorised access to patient data was 'completely unacceptable'. The trust said disciplinary action would be taken if needed. Ten employees were removed from active duty or suspended. At least 1,300 people helped search for Noah.
The facts every outlet at this table agrees on.
02Every voice
One entry per outlet, in the order they should be read. Each links back to the reporting it was drawn from — check any of it.
The Guardian
Read the original· theguardian.comHow they framed it
The Guardian emphasises the suspension of 10 staff and places the breach in the context of previous NHS data breaches, while also covering the inquest and family tributes.
In their words
The Guardian reported that 10 employees had been 'removed from active duty or suspended whilst investigations are concluded' and that the trust said disciplinary action was being explored. It quoted Dr Martin Mansfield: 'We have apologised unreservedly to Noah Woods’ family for the extra anguish this breach of trust has caused them at an already devastating time.' It also quoted Sir Jim Mackey, chief executive of NHS England: 'We have seen too many cases of people abusing that trust, and enough is enough.' The Guardian noted previous cases of NHS staff looking at patient records, including the 2023 Nottingham attacks and the 2024 Southport dance class knife attack.
BBC News
Read the original· bbc.co.ukHow they framed it
BBC News frames the event around the trust's apology and the launch of an urgent investigation, with a brief mention of the search and inquest.
In their words
BBC News reported that the East Suffolk and North Essex NHS Foundation Trust said it had secured the records, reported the breach to the Information Commissioner's Office, and will take disciplinary action if needed. It quoted Dr Martin Mansfield: 'Immediate steps were also taken to secure the records and prevent further access that was not for a legitimate, clinical reason. We have reported the matter to the Information Commissioner's Office (ICO), and we will continue to keep Noah's family informed as our investigation progresses.' It also noted that at least 1,300 people helped in the search and that an inquest heard Noah had left a play area 'through a gap in the fence'.
03Where they differ
The Guardian leads with the suspension of 10 staff and includes comments from Sir Jim Mackey on NHS staff snooping, as well as references to previous high-profile data breaches. BBC News does not mention the number of staff suspended or Mackey's comments, and instead focuses on the trust's apology and the investigation. Both outlets report the apology, the ICO referral, and the inquest detail about the fence gap, but they emphasise different aspects of the trust's response.
Described, not adjudicated. Roundtable does not tell you which account is right.
04Still open
- How many people accessed the records without authorisation?
- What was the motive or reason for the unauthorised access?
- What disciplinary actions, if any, have been taken against the 10 staff?
- What specific security measures were implemented to secure the records?
- Will the Information Commissioner's Office take any enforcement action against the trust?









