NHS Tayside Investigates Alleged Data Breach in Minnie Merriman Murder Probe
NHS Tayside is examining an alleged data breach involving the medical records of nine-year-old Minnie Merriman, whose death in Arbroath is the subject of a murder investigation. The breach occurred in a clinical area where staff access patient information, though the health board has not provided further details on the scope or nature of the incident.
Minnie, from West Yorkshire, was found seriously injured at Elliot Industrial Estate in Arbroath shortly after midnight on Monday and later died at Ninewells Hospital in Dundee. A 35-year-old man, known to the girl, appeared in Forfar Sheriff Court on Wednesday charged with her murder and was remanded in custody. Police confirmed they are not seeking anyone else in connection with the case, while specialist officers continue to support Minnie’s family.
In a separate but related development, NHS Tayside faces scrutiny over the destruction of 40 logbooks linked to disgraced neurosurgeon Sam Eljamel, who harmed dozens of patients during his tenure at Ninewells Hospital. The logbooks, which may have contained critical evidence for an ongoing inquiry, were destroyed in July despite a judicial order to retain them raising concerns over potential legal violations.
The Merriman family, who were camping in the area at the time of the incident, released a statement describing Minnie as "incredible, beautiful, and brave" and requested privacy during this period. Meanwhile, delays in the Eljamel inquiry have been attributed to the destruction of the logbooks, with patient watchdogs previously expressing doubts that Eljamel’s actions would have been stopped under existing safeguards.
Source: https://www.bbc.com/news/articles/cvg8n70jp2jo
NHS Tayside cybersecurity rating report: https://www.rankiteo.com/company/nhs-tayside
"id": "NHS1786098335",
"linkid": "nhs-tayside",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1 (Minnie Merriman, potentially '
'others)',
'industry': 'Healthcare',
'location': 'Scotland, UK',
'name': 'NHS Tayside',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Statement released to the public and Minnie '
"Merriman's family",
'data_breach': {'number_of_records_exposed': '1 (potentially more)',
'personally_identifiable_information': 'Yes (medical records '
'of a minor)',
'sensitivity_of_data': 'High (medical records of a minor, '
'murder investigation subject)',
'type_of_data_compromised': 'Medical records'},
'description': 'NHS Tayside is examining an alleged data breach involving the '
'medical records of nine-year-old Minnie Merriman, whose death '
'in Arbroath is the subject of a murder investigation. The '
'breach occurred in a clinical area where staff access patient '
'information.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'scrutiny over data handling',
'data_compromised': 'Medical records of Minnie Merriman',
'identity_theft_risk': 'High (medical records of a minor)',
'legal_liabilities': 'Potential legal violations due to '
'destruction of logbooks in a separate case',
'systems_affected': 'Clinical area patient information system'},
'investigation_status': 'Ongoing',
'references': [{'source': 'BBC News'}],
'regulatory_compliance': {'regulations_violated': 'Potential violations of UK '
'data protection laws '
'(e.g., GDPR, NHS data '
'handling policies)'},
'response': {'communication_strategy': 'Public statement acknowledging the '
'investigation'},
'title': 'Alleged Data Breach in Minnie Merriman Murder Probe',
'type': 'Data Breach'}