A 30-year-old man from Norfolk was arrested then bailed on suspicion of attempted murder over the incident

A hospital has launched a probe after 40 employees tried to access the medical records of the boy who was "thrown" into a crocodile enclosure.

The three-year-old, who is now in a stable condition, was taken to Addenbrooke's Hospital in Cambridge on June 18 after entering a crocodile enclosure at Johnsons Zoo, near Huntingdon.

An investigation is now underway after Cambridge University Hospitals (CUH) said it was looking into whether staff members accessing the records of the boy were legitimate.

It has also referred itself to the Information Commissioner's Office (ICO).

A CUH spokesman said: "We have strict policies in place to safeguard patient data and we take any breach extremely seriously.

"We know the vast majority of our 13,000 staff understand the fundamental importance of maintaining patient confidentiality and uphold the highest professional standards.

"Where any member of staff is found to have accessed patient records without legitimate clinical or operational reasons we take robust disciplinary action, including dismissal.

"As part of our response to any breach, we notify both the ICO and apologise to patients and their families affected."

The spokesman said the boy's family had been informed of the ongoing probe.

The young boy was seriously injured after entering the crocodile enclosure at Johnsons Zoo, where it is understood he was attacked by at least one crocodile.

He was initially in a critical condition, but Cambridgeshire Police announced on Monday he was now in a "stable condition".

A spokesman for Cambridgeshire Police said earlier this week: "The boy is no longer critical and is in a stable condition in hospital."

A 30-year-old man from Norfolk was arrested on suspicion of murder following the incident.

However, the man has since been released on bail after being determined as "not being fit for interview".

The three-year-old is from Cambridgeshire and was visiting the zoo with his family when he was "thrown" in, sustaining serious injuries while in the enclosure, but was pulled out by staff, the police said.

An investigation was consequently launched by Cambridgeshire Police involving their Major Crime Unit.

Chris Newman, the director of the National Centre for Reptile Welfare told the BBC he had spoken to the child's family, describing them as "distraught".

He said: "Tracey was the first on the scene, but she was then joined by her husband Andy and their youngest son Edward. All three were involved in the rescue.

"All three were heroes... they're a close-knit family and they're still quite shaken by it."

A similar probe was launched last year following the NHS staff improperly accessing medical records of the Nottingham attacks in June 2023.

Barnaby Webber, Grace O'Malley-Kumar, both 19, and grandfather Ian Coates were stabbed to death by Valdo Calocane, who had been diagnosed with paranoid schizophrenia, on June 13, 2023.

It emerged in 2025 that staff at Nottingham University Hospitals NHS Trust (NUH) had accessed the victims' records without justification, prompting an internal investigation which resulted in the dismissal of 11 employees.

Among those investigated was doctors, nurses, registered medical professionals, admin and clerical colleagues.

Emma Webber, the mother of Barnaby, said at the time the news was "shocking" and "heartbreaking".