An NHS trust has removed 10 employees from active duty while investigations are carried out into a data breach of a three-year-old's medical records.