The British Royal Family has been exceptionally tight-lipped about the health and well-being of the Princess of Wales, Kate Middleton, as she continues to stay out of the public's eye while recovering from abdominal surgery and nearly two-week hospitalization in January.

There are now reports of a "major security breach" and subsequent investigation at the prestigious London facility where Middleton was hospitalized amid allegations that at least one staffer attempted to improperly access the princess' medical records, according to a Tuesday report from the U.K.'s Mirror.

The allegations are particularly scandalous for The London Clinic, a world-renowned private hospital that takes pride in its reputation for discreetly treating members of the Royal Family, celebrities, politicians from around the world, and social elites.

Alleged breach of private medical records

"This is a major security breach and incredibly damaging for the hospital, given its unblemished reputation for treating members of the Royal Family," an unnamed insider source told the Mirror. "Senior hospital bosses contacted Kensington Palace immediately after the incident was brought to their attention and assured the palace there would be a full investigation."

"The whole medical staff have been left utterly shocked and distraught over the allegations and were very hurt that a trusted colleague could have possibly been responsible for such a breach of trust and ethics," the insider added.

It is a criminal offense in the U.K. for any medical staff to access a patient's records without authorization, and Health Minister Maria Caulfield has called upon law enforcement to fully investigate the alleged security breach and, if proven true, prosecute any culprits.

A spokesperson for the Information Commissioner's Office, which would lead any such investigation, told the Mirror, "We can confirm that we have received a breach report and are assessing the information provided."

Investigators reportedly scrutinizing three staffers as well as the hospital

ABC News reported Thursday that, according to local British media, an investigation into the alleged security breach at The London Clinic has been launched and expanded to include at least three unidentified staffers who may have accessed the confidential medical records of the Princess of Wales.

Yet, the U.K.'s The Guardian reported that the hospital itself is also being closely scrutinized by the ICO, per an unnamed source, with particular attention paid to the "timeliness of reporting" of the alleged breach, given a requirement that any suspected breaches of personal data must be reported to authorities within 72 hours of an alleged incident.

"Everyone at The London Clinic is acutely aware of our individual, professional, ethical, and legal duties with regards to patient confidentiality," Al Russell, CEO of The London Clinic, said in a statement, per ABC. "We take enormous pride in the outstanding care and discretion we aim to deliver for all our patients that put their trust in us every day."

"We have systems in place to monitor management of patient information and, in the case of any breach, all appropriate investigatory, regulatory, and disciplinary steps will be taken," he added. "There is no place at our hospital for those who intentionally breach the trust of any of our patients or colleagues."

Middleton is said to be aware of the alleged brief, but Kensington Palace, which manages the affairs of the princess and her husband, Prince of Wales William, the heir to King Charles III, declined to comment specifically on the allegations and said simply, "This is a matter for the London Clinic."

Middleton could sue; staffers and hospital could face large fines

According to Newsweek, Middleton would have grounds to sue for compensation if it turns out to be true that her private medical records were improperly accessed, and while such a lawsuit over the violation of her privacy and data rights is certainly possible, such litigation seems unlikely given the Royal Family's general aversion, with some exceptions, to getting embroiled in legal fights in the courts.

As for any staffers who may have inappropriately accessed Middleton's records, if confirmed by investigators, they could be prosecuted by the ICO and, if convicted, face potentially steep fines but no imprisonment. Likewise, the hospital could be fined and face other repercussions, not the least of which is a damaged reputation, if it is found to have been lax in its efforts to protect the private data of its patients.