Two members of the hospital staff were disciplined for accessing Ed Sheeran's personal details for no legitimate reason.
The medical staff member was given a written warning and a member of the admin staff was sacked.
It said both cases of disciplinary action happened after 16 October, the date on which the singer was admitted to the hospital.
Sheeran had broken his right wrist and left elbow.
Ipswich Hospital would not provide further details of the data breach incident but said the breach accessed patient information without legitimate or clinical reason.
It said neither were referred to the Nursing and Midwifery Council or to other professional bodies.
Source: https://www.bbc.com/news/uk-england-suffolk-44155784
TPRM report: https://scoringcyber.rankiteo.com/company/ipswich-hospital
"id": "ips21238722",
"linkid": "ipswich-hospital",
"type": "Data Leak",
"date": "05/2018",
"severity": "50",
"impact": "",
"explanation": "Loss of patient information without legitimate or clinical reason"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Ipswich, UK',
'name': 'Ipswich Hospital',
'type': 'Hospital'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Details']},
'description': 'Two members of the hospital staff were disciplined for '
"accessing Ed Sheeran's personal details for no legitimate "
'reason.',
'impact': {'data_compromised': ['Personal Details']},
'motivation': 'Unauthorized Access for Personal Reasons',
'references': [{'source': 'News Article'}],
'response': {'remediation_measures': ['Disciplinary Action']},
'threat_actor': 'Hospital Staff',
'title': "Unauthorized Access to Ed Sheeran's Personal Details",
'type': 'Data Breach',
'vulnerability_exploited': 'Insider Threat'}