Cambridge University Hospitals (CUH) is looking into why around 40 people accessed the medical files of a three-year-old boy taken to hospital after a crocodile attack at a Cambridgeshire zoo.
The three-year-old boy, who hasn't been named, was taken to Addenbrooke's Hospital last Thursday after ending up in the crocodile enclosure at Johnsons of Old Hurst, near Huntingdon.
Cambridge University Hospitals (CUH) said it is investigating why around 40 people accessed the boy's records, and has referred itself to the Information Commissioner's Office (ICO).
A CUH spokesperson said: "We have strict policies in place to safeguard patient data and we take any breach extremely seriously.
"We know the vast majority of our 13,000 staff understand the fundamental importance of maintaining patient confidentiality and uphold the highest professional standards.
"Where any member of staff is found to have accessed patient records without legitimate clinical or operational reasons we take robust disciplinary action, including dismissal.
"As part of our response to any breach, we notify both the ICO and apologise to patients and their families affected."
The boy was seriously hurt after he ended up in the crocodile enclosure.
It is understood he was attacked by at least one crocodile after he was allegedly thrown into the enclosure.
Read more from Sky News:
TV presenter set to lose job over Tommy Robinson interview
Don't buy air conditioning until you've read this
A 30-year-old man was arrested on suspicion of attempted murder.
Police said the arrested man, from Norfolk, was "assessed as not being fit for interview" and has been released on bail until September.
(c) Sky News 2026: Hospital probe into why 40 people accessed file of boy attacked by crocodile

British TikToker Brooke George could face death penalty after Dubai murder charge
Teenage boy found not guilty of killing nine-year-old Aria Thorpe
Don't buy air conditioning until you've read this
Eight bodies found in state of 'advanced deterioration' at NHS trust