Key Facts

• The data breach involved Princess Kate’s medical records from her abdominal surgery.
• The incident happened at the London Clinic, a private hospital used by the royal family.
• The breach was first reported in March 2024 during Kate’s secret cancer treatment.
• The Information Commissioner’s Office (ICO) investigated and issued a formal caution to the former healthcare worker.
• The worker tried to sell the confidential information for money, which is illegal under the Data Protection Act 2018.
• The ICO decided a caution was the right punishment because of the evidence and public interest.
• The case is still developing and may have more updates later.