# Man Sentenced for Posing as Medical Student at Aberdeen Hospital Stephen Simpson received community service after infiltrating hospital wards and accessing restricted patient files. - **Source:** [BBC News – Scotland](https://www.bbc.co.uk/news/scotland) - **Published:** 2026-11-11 - **Topic:** [politics](https://brifing.si/c/politics) - **Original article:** - **On Brifing:** https://brifing.si/s/b0bf897e-934d-441a-be77-160e5dd29b7c ## Unauthorized Hospital Access Stephen Simpson, a 22-year-old from Aberdeen, successfully infiltrated the Aberdeen Royal Infirmary by posing as a medical student. Between December 9, 2023, and January 26, 2024, he accessed restricted wards and staff-only areas. He utilized medical scrubs, an NHS pager, and a stethoscope to deceive hospital employees during his repeated visits. ## Sentencing and Legal Outcome At Aberdeen Sheriff Court, Sheriff Morag McLaughlin sentenced Simpson to 300 hours of unpaid community service. Additionally, he will remain under supervision for two years. While the judge acknowledged that the severity of the fraud crossed the threshold for potential custody, she determined that a prison sentence would be disproportionate given the circumstances. ## Discovery of the Fraud The deception began to unravel after staff reported missing items from lockers, including perfume and NHS clothing, following the Christmas period. Security personnel reviewed CCTV footage, which captured Simpson handling medical notes and moving through restricted zones. His presence was eventually confirmed as unauthorized when security officers stopped him on January 26, 2024. ## Security Breach Details Simpson had previously manipulated staff by claiming to be a student authorized to be on-site. On Christmas Day 2023, he even reported a damaged charity coin machine to security to bolster his cover. Investigations revealed he had stolen a consultant surgeon's pager, which was subsequently deactivated once the breach was fully identified. ## NHS Grampian Response NHS Grampian confirmed that while Simpson accessed physical files, he had no face-to-face contact with patients and did not breach electronic IT systems. The health board reported the incident to the Information Commissioner's Office, which concluded that no further action was required. Security arrangements at the facility have since been formally reviewed. ## Defense and Personal Context Defense lawyer Laura Gracie stated that Simpson had an interest in a nursing career but acknowledged his actions were misguided. She emphasized that there was no evidence he misused the patient files he accessed. Simpson expressed embarrassment regarding the incident, accepting full responsibility for the consequences of his deceptive behavior within the hospital. ## Privacy and Safety Concerns Sheriff McLaughlin described the incident as a serious and potentially dangerous offense due to the violation of patient privacy. Handling sensitive medical documentation created significant risks for the institution. Despite these concerns, the court balanced the nature of the crime against sentencing guidelines, ultimately opting for a community payback order instead. ## Broader Institutional Implications This case highlights the vulnerabilities inherent in large hospital environments where staff movement is frequent. The breach prompted an internal security audit at Aberdeen Royal Infirmary to prevent future impersonation attempts. Maintaining strict credential verification remains a critical priority for healthcare facilities to protect both patient data and the integrity of clinical wards. ## Sources covering this story - https://www.bbc.co.uk/news/articles/c699e0mk1m3vo?at_medium=RSS&at_campaign=rss — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._