Jimmy Savile abused 63 people connected to Stoke Mandeville Hospital, but the one formal complaint made was ignored, an independent report has found.
It found Savile's reputation as a "sex pest" was an "open secret" among some staff - but allegations probably did not reach managers. The formal complaint - made in 1977 by an 11-year-old girl's father - should have been reported to police, it added. A separate report said "elements of the Savile story" could happen again.
The Stoke Mandeville report said the victims, abused from 1968-92, were aged eight to 40. Sexual abuse by Savile ranged from inappropriate touching to rape - including the rape of children under the age of 12.
Health Secretary Jeremy Hunt said people were "too dazzled or too intimidated to confront the evil predator we now know he was". Dr Androulla Johnstone, the report's lead investigator, said the victims were "patients, staff, visitors, volunteers and charity fundraisers" - with almost half aged under 16 and 10 under the age of 12.
"Around one third of his attacks were against patients, just over 90% of the victims were female," she said. "Savile was an opportunistic predator who could also on occasions show a high degree of pre-meditation when planning attacks on his victims." However, in a statement, the victim of the 1977 formal complaint said she felt "let down and betrayed by the report".
She told the inquiry how Savile sexually assaulted her following an operation at Stoke Mandeville to treat skin cancer, when she was aged 11. But she said parts of her evidence had been omitted from the report and criticised authors for concluding that senior management would not have known about her father's complaint.
"How they can say that those in authority did not know is inconceivable. I feel that I am being blamed for not taking it further, but I was just a child, suffering from cancer. "The report is nothing but a whitewash," she added.