NHS record access probe follows tiger attack death at Yorkshire Wildlife Park
Yorkshire Ambulance Service has opened an investigation after identifying two possible incidents in which staff may have accessed, or attempted to access, medical information about William Chapman without a legitimate reason. The suspected breaches came after the 24-year-old was mauled to death at Yorkshire Wildlife Park near Doncaster, where he had entered the tiger enclosure on Saturday.
Patient confidentiality remains a core clinical obligation even when the case is high-profile, distressing, or tied to a sudden death. Ambulance records can contain details that are intensely private and operationally sensitive: dispatch notes, clinical observations, time stamps, and information linked to the immediate response. Unauthorised viewing of those records can expose families to additional harm and erode trust in emergency services at the very moment they are under the most strain.
Yorkshire Ambulance Service said the concern emerged through proactive audits, a reminder that electronic record systems can be monitored, but not perfectly policed, without active governance and a strong internal culture of restraint. The trust said it believes there may have been two instances involving two members of staff who accessed or tried to access incident or medical information after the death without a valid professional reason.
The trust has reported the matter to the Information Commissioner’s Office and said it is investigating the circumstances and the actions of the individuals involved. Chapman’s family has been informed, and the trust has said it will keep them updated as the inquiry progresses.
His death itself was described at an inquest at Doncaster Coroner’s Court as the result of multiple traumatic injuries and animal interaction. The inquest heard that Chapman had attended the park at about 13:30 BST, climbed over two fences, and entered the tiger enclosure before the attack. Park staff secured the tiger after the incident, and paramedics later confirmed his death at the scene.
Trauma, enclosure breach and the limits of emergency response
The circumstances of the death point to a catastrophic injury pattern that leaves little room for meaningful prehospital intervention once the attack has occurred. In severe animal mauling, death can follow overwhelming blood loss, crush injury, airway compromise, or combinations of these forces. When the inquest records multiple traumatic injuries, the clinical language signals the scale of damage rather than a single isolated wound.
Chapman had a history of mental illness, including schizophrenia and previous bouts of psychosis, the inquest heard. Senior coroner Nicola Mundy said he was under adult mental health services in Doncaster, but was also highly functioning and independent with no care requirements. Those details matter because they show a patient who had contact with mental health services but was not described as needing day-to-day support at the time of his death.
The case sits at the intersection of emergency medicine, mental health, and information governance. Clinicians and ambulance workers often operate in emotionally charged situations where curiosity can masquerade as concern, yet access to records must still be justified by direct care, legal duty, or another formally recognised reason. In digital systems, the barrier to entry can be deceptively low; the professional standard is not.
A breach after a public death is especially corrosive because it extends the event beyond the fatal injury itself. Families are left not only with loss, but with the possibility that private medical details were viewed inappropriately after the fact. For healthcare organisations, such incidents can trigger regulatory scrutiny, mandatory reporting, and internal discipline, all while the underlying bereavement is still raw.
What the ambulance trust is now trying to establish
The investigation will need to determine who accessed the records, what information was viewed, whether the access was attempted or completed, and whether any disciplinary or procedural failures allowed it to happen. In a modern NHS setting, those questions are central because audit trails can identify logins, times, and user accounts, but they do not by themselves explain motive.
The trust has said it has robust systems to protect information and that the problem was identified through proactive audits. Even so, two potential unauthorized accesses in one case suggest the safeguards did not prevent the concern from arising in the first place. In information governance, detection is only one layer of protection; deterrence and accountability are just as important.
The family’s notification also matters clinically and ethically. Confidentiality breaches after a death do not alter the medical outcome, but they can worsen the psychological burden on relatives who are trying to understand what happened and why. In traumatic deaths, the boundary between legitimate clinical documentation and intrusive curiosity becomes especially important to protect.
Yorkshire Wildlife Park has reopened to visitors while the inquest and related inquiries continue. For the ambulance service, the immediate issue is narrower: whether two staff members crossed the line from professional access into unjustified viewing of a deceased patient’s information. The answer will determine whether the case ends as a governance failure, a disciplinary matter, or a regulatory breach with wider consequences for NHS record security.