An internal investigation has been launched after the medical records of a three-year-old boy injured in a crocodile enclosure were accessed by dozens of staff members at Cambridge University Hospitals (CUH). The hospital has referred the matter to the Information Commissioner’s Office to determine whether all 40 employees who viewed the boy’s information had appropriate authorization.

The incident occurred last Thursday at Johnsons of Old Hurst, a zoo located in Cambridgeshire, where the child entered the crocodile enclosure and sustained injuries. He was subsequently transported to Addenbrooke’s Hospital, operated by CUH, and is now reported to be in stable condition.

Authorities arrested a 30-year-old man from Norfolk on suspicion of attempted murder in connection with the incident. He was later released on bail after being evaluated as unfit to undergo police interview. Reports indicate the suspect has learning difficulties and had been attending the zoo with carers at the time of the incident.

The investigation currently focuses both on the circumstances surrounding the event at the zoo and the potential breach of patient confidentiality at the hospital. CUH is reviewing access logs to determine whether all staff members had legitimate reasons to view the child’s records, given the sensitivity of the case.