ON
← Back to feed
HSE fined after records found covered in animal droppings
Ireland🏛️ PoliticsCenter9/2/2026

HSE fined after records found covered in animal droppings

In 2023, boxes of medical records were found in poor condition at St Conal's Hospital in Letterkenny, County Donegal. The Data Protection Commission (DPC) investigated the HSE's storage practices and found multiple issues including contamination by animal droppings, mold damage, and improper storage conditions. Site inspections revealed 'profound disarray and neglect' with records stored in unsuitable locations like disused bathrooms and abandoned buildings. As a result, the DPC fined the HSE €645,000, the largest fine ever imposed on a public body, and mandated corrective actions. The investigation followed social media posts showing improperly stored records at two disused psychiatric hospitals. The DPC emphasized the risks of unauthorized access to sensitive medical data and the potential unavailability of records for necessary care. The HSE acknowledged the findings and pledged compliance.

The Health Service Executive (HSE) has been fined €645,000 by the Data Protection Commission (DPC) following an investigation into the improper storage of paper medical records. These records were found in deplorable conditions, including being rotting, covered in mould, contaminated with animal droppings, and buried under rubble or water damage. The violations were uncovered after unauthorized individuals accessed two former psychiatric hospitals and shared footage of the deteriorated documents on social media. The DPC confirmed that the breaches were not isolated incidents, prompting a broader inspection of 12 HSE storage sites across Ireland. The initial incidents occurred in October and November 2023, when people entered St Loman’s Hospital in Mullingar, County Westmeath, and St Conal’s Hospital in Letterkenny, County Donegal. Both facilities were no longer in active use, with St Loman’s contaminated by asbestos and St Conal’s suffering from severe mould infestation. Videos posted online showed boxes of medical records, including death certificates, stored in these abandoned buildings. In April 2024, the HSE itself informed the DPC that additional records had been accessed via social media, leading to further scrutiny of the storage practices. During subsequent inspections, DPC officials found multiple storage areas in a state of "profound disarray and neglect." Records were stored in disused bathrooms, a shipping container placed in a turf shed, rooms lacking proper lighting or heating, and even in derelict buildings scattered across different locations. Many documents were either damaged beyond recognition or rendered unusable due to environmental factors. The DPC emphasized that the HSE had retained records past their required retention periods, increasing the risk of unauthorized access and potential exposure of sensitive medical information. Graham Doyle, deputy commissioner of the DPC, stated that the storage conditions posed an ongoing risk to data security. He noted that the HSE had previously faced similar issues related to inadequate security measures and the mishandling of personal data in paper records. As a result, the DPC mandated the HSE to conduct a comprehensive audit of all storage facilities and to securely dispose of any records no longer needed for their intended purposes. The HSE acknowledged the findings and expressed regret over the breaches. It admitted to non-compliance with existing policies on record retention and management. The organization explained that both St Loman’s and St Conal’s, though no longer used for clinical activities, had functioned as storage sites. Following the breaches, the HSE implemented measures to enhance facility security, evaluate the condition of the records, and appropriately destroy or relocate them. The HSE described developing a standardized, national approach to record archiving and disposal as a top priority moving forward. The DPC’s decision to fine the HSE marks the highest penalty ever imposed on a public body in Ireland for data protection violations. The fines and corrective actions reflect the severity of the lapses in securing sensitive medical information. The DPC’s findings underscored the need for improved oversight and accountability in managing physical records, particularly in ensuring compliance with data protection laws. The HSE has pledged to adhere to the DPC’s recommendations and continue addressing the shortcomings identified in the investigation. Efforts are underway to implement changes that align with best practices in data management and secure storage. The DPC has also ordered the HSE to conduct a thorough review of its current storage infrastructure to prevent future occurrences of such breaches. This includes evaluating the suitability of existing storage spaces and establishing protocols for the safe handling and destruction of outdated records. The situation highlights the risks associated with retaining physical medical records in substandard conditions. The potential consequences include not only the exposure of private patient information but also the inability to access critical medical data when needed. The DPC’s intervention aims to mitigate these risks by enforcing stricter standards for record management and ensuring that all personal data is protected according to legal requirements. The HSE’s response indicates a commitment to rectifying the issues and preventing similar incidents from occurring in the future.

How this report was made. Objective News wrote this report from 3 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

4 reports

The Irish Times logoThe Irish TimesIndependent🔒CenterFactual 90Objective 859/2/2026
HSE fined €645,000 after rotting medical records found amid animal droppings and rubble

The Health Service Executive (HSE) in Ireland has been fined €645,000 by the Data Protection Commission (DPC) following an investigation into the improper storage of medical records. The inquiry revealed that records were found in deplorable conditions, including being damaged by mould, contaminated with animal droppings, buried under rubble, or ruined by water damage. These issues were uncovered after unauthorized access to paper records at two former psychiatric hospitals, St Loman’s Hospital in Westmeath and St Conal’s Hospital in Donegal, was reported. Social media videos exposed the discovery of sensitive medical information, including death records, stored in these abandoned facilities. The DPC conducted multiple site inspections and determined that the problems were not isolated but indicative of systemic failures in document storage practices across the HSE.

Bias read (Center): The article presents factual findings from the Data Protection Commission regarding the HSE's failure to secure medical records. It does not exhibit overtly biased language, one-sided sourcing, or omission of context. The focus is on the regulatory response to a data protection issue rather than on党

Why factuality (90): This article provides a detailed account of the HSE fine, including the timeline of events, the involvement of social media, and the specifics of the two hospitals involved. It aligns closely with the other sources and includes additional context about the DPC's role and the nature of the breaches.

Why objectivity (85): The article maintains a balanced tone, presenting information objectively while still using descriptive language to convey the severity of the situation. There is no clear editorializing or bias evident.

TheJournal.ie logoTheJournal.ieIndependentCenterFactual 85Objective 809/2/2026
HSE fined €645k after old medical records found rotting, mouldy and covered in animal droppings

The Health Service Executive (HSE) has been fined €645,000 by Ireland's Data Protection Commission (DPC) for improper storage of medical records in disused buildings. The issue was brought to light when individuals broke into abandoned hospitals and shared videos online showing deteriorated records covered in mold and animal waste. The DPC investigated 12 HSE sites, finding widespread poor storage conditions, including lack of lighting, heating, and organization. Records were stored in unsanitary environments like bathrooms and shipping containers, posing risks of unauthorized access and loss of critical medical information.

Bias read (Center): The article presents a factual account of the HSE's failure to properly store medical records, focusing on regulatory oversight and public safety concerns. There is no overt ideological framing or emphasis on specific political groups. The tone remains neutral, detailing the findings of the Data Pro

Why factuality (85): The article accurately reports the HSE fine from the DPC, citing the discovery of contaminated and damaged records in disused hospitals. It references the initial trigger of social media posts and the subsequent DPC investigation. While it mentions the HSE's self-notification in April 2024, it omits

Why objectivity (80): The tone remains neutral, presenting facts without overt bias. However, the article uses phrases like 'rotting, mouldy and covered in animal droppings' which may carry slightly emotive weight, though this is common in reporting on unsanitary conditions.

RTÉ News logoRTÉ NewsState / PublicCenterFactual 80Objective 859/1/2026
HSE fined €645k over records covered in animal droppings

In 2023, boxes of medical records were found in poor condition at St Conal's Hospital in Letterkenny, County Donegal. The Data Protection Commission (DPC) investigated the HSE's storage practices and found multiple issues including contamination by animal droppings, mold damage, and improper storage conditions. Site inspections revealed 'profound disarray and neglect' across several HSE facilities. As a result, the DPC fined the HSE €645,000, the highest fine ever imposed on a public body, and mandated corrective actions. The investigation followed social media posts showing improperly stored records in abandoned psychiatric hospitals. The DPC emphasized risks of unauthorized access to sensitive medical data and ensured the HSE would conduct audits and securely destroy unnecessary records.

Bias read (Center): The article presents a factual account of a regulatory action against the HSE by the DPC, focusing on compliance and data protection standards. There is no overt ideological framing or emphasis on specific political agendas. The tone remains objective, detailing the findings, penalties, and required

Why factuality (80): Similar to the previous RTÉ article, this version is incomplete and lacks some details. It confirms the HSE fine and the DPC investigation, referencing the social media-triggered discovery and the inspection of multiple sites. However, it misses some specific information about the types of contamina

Why objectivity (85): The article presents the information in a straightforward manner without apparent bias. Despite being cut off, it maintains a neutral tone throughout.

RTÉ News logoRTÉ NewsState / PublicCenterFactual 80Objective 859/1/2026
HSE fined after records found covered in animal droppings

In 2023, boxes of medical records were found in poor condition at St Conal's Hospital in Letterkenny, County Donegal. The Data Protection Commission (DPC) investigated the HSE's storage practices and found multiple issues including contamination by animal droppings, mold damage, and improper storage conditions. Site inspections revealed 'profound disarray and neglect' with records stored in unsuitable locations like disused bathrooms and abandoned buildings. As a result, the DPC fined the HSE €645,000, the largest fine ever imposed on a public body, and mandated corrective actions. The investigation followed social media posts showing improperly stored records at two disused psychiatric hospitals. The DPC emphasized the risks of unauthorized access to sensitive medical data and the potential unavailability of records for necessary care. The HSE acknowledged the findings and pledged compliance.

Bias read (Center): The article presents a factual account of the HSE's data protection failures without overtly criticizing or praising the government agency. It reports on the DPC's findings and penalties without taking a clear ideological stance. While the issue involves public administration and accountability, the

Why factuality (80): The article covers the main points of the HSE fine but appears to be cut off mid-sentence. It references the DPC investigation, the discovery of contaminated records, and the launch of the investigation in May 2024. Some details are missing compared to the full versions in other sources, particularl

Why objectivity (85): The tone remains neutral and factual, focusing on the core elements of the story without introducing subjective commentary. The brevity of the article does not affect its objectivity.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories