Key Facts

• The boy was attacked in a crocodile enclosure at Johnsons of Old Hurst zoo near Huntingdon.
• He was treated at the scene and then taken to Addenbrooke’s Hospital in Cambridge, where his condition is now stable.
• Police arrested a 30-year-old man on suspicion of attempted murder related to the incident.
• Up to 40 hospital staff looked at the boy’s medical records, which had restricted access to protect privacy.
• The hospital is investigating whether these staff had legitimate reasons for viewing the records.
• The hospital reported the issue to the Information Commissioner’s Office, which oversees data protection.
• The hospital stressed it has strict rules around patient confidentiality and will discipline staff who access records improperly.
• The boy’s family has been informed about the investigation into the data access breach.