UK Biobank Data Leak: Confidential Datasets Found for Sale on Alibaba

UK Biobank discovered at least three listings of its confidential datasets for sale on Chinese e-commerce platform Alibaba. The listings were quickly removed, and no purchases were made. The data included sensitive health and lifestyle information but not direct identifiers like names or addresses. UK Biobank suspended access to its research platform as a precautionary measure.

Key Points: UK Biobank Data Leak: Datasets Sold on Alibaba

  • UK Biobank data found for sale on Alibaba
  • No purchases reported
  • Data includes gender, health, lifestyle info
  • UK government praised China's quick removal
  • Access to research platform suspended
2 min read

UK Biobank's confidential datasets appear for sale on China's Alibaba: Report

UK Biobank alerts government after confidential datasets appear for sale on Alibaba. No purchases made, but data includes sensitive health details.

"The government has spoken to the vendor today, and they do not believe there were any purchases from the three listings before they were taken down - Ian Murray"

New Delhi, April 25

Health charity UK Biobank has alerted the UK government after at least three listings offering datasets drawn from its research platform appeared on Chinese e-commerce marketplace Alibaba, a new report has revealed.

The listings were removed quickly, and no purchases have been reported to be made as none paid for access to the listings, the report from DW.com said.

Ian Murray, the Labour MP for Edinburgh South and a minister of state at the Department of Science, Innovation and Technology, thanked the Chinese government for the "speed and seriousness with which they worked with us to help remove these listings."

Murray said the exposed files did not include names, addresses, contact details or telephone numbers and that at least one of the datasets listed appeared to cover data from all 5 lakh volunteers on the platform.

These volunteers had provided to the UK charity in a bid to improve research capabilities worldwide.

"The government has spoken to the vendor today, and they do not believe there were any purchases from the three listings before they were taken down. Once the government was aware of the situation, we took immediate action to protect participants' data," he was quoted as saying in the report.

The report added possible data elements in the files included gender, month and year of birth, attendance dates, socioeconomic status, lifestyle habits, sleep, diet, mental health and health outcomes data, among several other things.

He warned that while the likelihood of identification based on these data is low, but it cannot be ruled out entirely.

UK Biobank suspended all access to its research platform as a short-term precautionary response to the leak and has implemented a strict limit on the size of files that can be taken off the platform, according to its chief executive Rory Collins.

"Secondly, we ensured that the Biobank charity revoked access for the three research institutions identified as the source of that information," Murray said.

- IANS

Share this article:

Reader Comments

P
Priya S
Honestly, this is a wake-up call for all of us who participate in research studies. These volunteers gave their data in good faith for scientific progress, and now this happens. The fact that gender, health conditions, and lifestyle habits were exposed is scary. Hope UK Biobank has learned its lesson about access controls. 🙏
V
Vikram M
Good that they caught it early and no purchases were made. But the fact that three research institutions had unauthorized access raises questions about the entire governance framework. As someone working in tech, I find it ironic that Chinese authorities helped remove these listings - shows how complex international data security has become. 🇮🇳
M
Michael C
Impressive how quickly UK Biobank suspended access and implemented file size limits. But I'm wondering - if they can track the source back to specific research institutions, shouldn't there be criminal penalties for those responsible? Data privacy isn't just about reputation management, it's about people's trust and safety. 📋
A
Ananya R
Yaar, this is why I'm always skeptical about sharing health data with any platform. 5 lakh volunteers' information - that's a massive breach. While UK Biobank has done good work for medical research, they need to be absolutely transparent about how this happened. As an Indian, I'm glad our Aadhaar-linked health data has stronger safeguards. 😔

We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.

Leave a Comment

Minimum 50 characters 0/50