The families of the Nottingham attack victims have said claims healthcare staff illegally accessed medical records belonging to their loved ones are “sickening” and “inexcusable”.

Barnaby Webber and Grace O’Malley-Kumar, both 19, and Ian Coates, 65, were stabbed to death by Valdo Calocane in the city in June 2023.

Dr Manjeet Shehmar, medical director at Nottingham University Hospitals NHS Trust, said the trust was investigating “concerns that members of staff may have inappropriately accessed the medical records” of the three victims.

The families described the news as “distressing and traumatic” in a joint statement.

“The families of Ian, Grace, and Barnaby have already had to endure much pain and heartache and I’m truly sorry that this will add further to their suffering,” Dr Shehmar said.

“Through our investigation, we will find out what happened and will not hesitate to take action as necessary.”

The claims of the medical records being accessed inappropriately were first reported by the Daily Mirror.

In a joint statement, the families of Mr Coates, Ms O’Malley-Kumar and Mr Webber said: “We cannot begin to describe how distressing and traumatic it is for us to learn of yet more revelations regarding the actions of individuals in the horror of losing our loved ones.

“These are not just data breaches for us, they are gross invasions of privacy and civil liberty.

“For people to choose to access information regarding the vicious attack and murder of Barney, Grace and Ian with no reason to do so is sickening.

“It’s gross and inexcusable voyeurism at the most repugnant level.

“We know that whilst some staff across the multiple agencies would need to access records, images and data, dozens, perhaps even hundreds, didn’t.

“God only knows what may have been looked at, discussed and shared.”

It comes a few months after an investigation was opened into allegations Ministry of Justice (MoJ) staff illegally accessed computer files related to the Nottingham attacks.

A special constable with Nottinghamshire Police was previously sacked for viewing bodycam footage showing the aftermath of the attacks.

In the June 2023 attack, Calocane killed Mr Webber, Ms O’Malley-Kumar and Mr Coates, before using Mr Coates’s van to drive into three pedestrians – Wayne Birkett, Marcin Gawronski and Sharon Miller – in the city centre.

Calocane was sentenced to a hospital order in January 2024 after admitting manslaughter on the grounds of diminished responsibility.

Following Calocane’s sentencing, the families were highly critical of the police and Crown Prosecution Service (CPS).

A subsequent review into the CPS found that while prosecutors had been right to accept Calocane’s pleas of manslaughter on the basis of diminished responsibility, they could have handled the case better.

There have been a number of other reviews, including an investigation into the NHS mental healthcare and treatment he received prior to the killings, published in early February.

This identified a catalogue of failings, including that Calocane, who has paranoid schizophrenia, was not forced to take his anti-psychotic medication in part because he did not like needles.

And it found he had no contact with mental health services or his GP for about nine months prior to the killings – after he was discharged when he repeatedly failed to engage with them.

Shortly after the findings were published, it was announced that a judge-led public inquiry into the attacks would take place “within weeks”.

This was welcomed by the families, who tearfully applauded the news during a meeting at No 10 Downing Street and called it a “watershed moment”.

They were told by Prime Minister Sir Keir Starmer a “number of different agencies” would be scrutinised.