Sensitive UK Biobank health data, potentially affecting nearly 500,000 participants, was briefly listed for sale on a Chinese marketplace. British authorities acted swiftly to remove the listings, but the incident has raised fresh concerns about the security of the vast research database.
Sensitive health data linked to nearly 500,000 participants in the UK Biobank was briefly listed for sale on a Chinese online marketplace, prompting swift action from British authorities to have the posts removed.UK Technology Secretary Ian Murray told lawmakers that the listings were taken down quickly after being flagged, with officials coordinating with Chinese authorities and the platform operator. The disclosures, reported by The Guardian, have triggered fresh concerns over the security of one of the world’s largest health research databases.The UK Biobank contains extensive medical information, including genetic data, diagnoses, brain scans and blood samples, used by researchers globally under strict access controls. Recently, anonymised general practice data was also added, expanding the dataset’s scope—and the risks associated with it.According to officials, three listings were identified on a platform linked to Alibaba, with one dataset potentially covering a significant portion of participants. While the data was described as anonymised, experts warn that such datasets can sometimes be re-identified when combined with other publicly available information. Chi Onwurah, who chairs the Commons science and technology committee, said repeated incidents could erode public trust and discourage participation in large-scale health research. Academics also raised concerns, with some calling it a serious failure of oversight and warning that once data is exposed, it is difficult to fully contain.Responding to the breach, UK Biobank chief Rory Collins said the organisation takes data protection “extremely seriously” and has launched a review of its security systems. Efforts are underway to strengthen digital safeguards, including tools to detect and block unauthorised data transfers.
