Woman charged after around 100 patient records accessed in NHS Lothian data breach

A woman has been charged after around 100 patients had their medical records accessed in a data breach at NHS Lothian.

The health board has written letters to patients affected by the breach, which they say was caused by one individual at Edinburgh Royal Infirmary.

A letter dated last month, seen by STV News, says the breach was discovered during a routine audit.

An internal investigation was launched, and Police Scotland confirmed a woman has been charged in connection.

In the letter, NHS Lothian said the woman no longer works at the health board.

Dr Tracey Gillies, medical director at NHS Lothian, said: “Routine monitoring suggested that patient records had been accessed inappropriately and an immediate investigation was launched.

“Appropriate action has been taken. Patients were contacted to make them aware and the incident was reported to Police Scotland and the Information Commissioner’s Office.

“We do not comment on individual members of staff.”

A Police Scotland spokesperson said: “On Tuesday, September 16, 2025, we received a report regarding a data breach in the Edinburgh area.

“A woman has been charged in connection, and a report has been submitted to the Procurator Fiscal.”