UK Biobank Health Data of 500,000 Individuals Offered for Sale in China
The UK government has confirmed that the health data of 500,000 participants in the UK Biobank a major biomedical database used for research on diseases like dementia, cancer, and Parkinson’s was advertised for sale on Alibaba’s e-commerce platforms in China. The breach was reported to authorities on Monday by the charity managing the Biobank.
Officials clarified that the compromised data was de-identified, meaning it did not include names, addresses, contact details, or other directly identifiable information such as NHS numbers. UK Biobank’s CEO, Professor Sir Rory Collins, acknowledged the incident, expressing concern over the temporary availability of the listings. The data has since been removed from the platform, with no confirmed purchases made from the three listings.
The UK Biobank is collaborating with the UK and Chinese governments, as well as Alibaba, to investigate the breach. Technology Minister Ian Murray confirmed the government’s awareness of the incident and thanked Chinese authorities for their cooperation in addressing it. The Biobank has also reassured participants that the data’s exposure, while troubling, did not compromise personally identifiable details. Further inquiries into the breach are ongoing.
Source: https://www.bbc.com/news/articles/cpvxgl3n138o
UK Biobank cybersecurity rating report: https://www.rankiteo.com/company/uk-biobank
"id": "UK-1776947333",
"linkid": "uk-biobank",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '500,000 participants',
'industry': 'Healthcare/Research',
'location': 'United Kingdom',
'name': 'UK Biobank',
'size': 'Large',
'type': 'Biomedical Database'}],
'customer_advisories': 'Reassurance about de-identified data',
'data_breach': {'number_of_records_exposed': '500,000',
'personally_identifiable_information': 'No (de-identified)',
'sensitivity_of_data': 'High (biomedical research data)',
'type_of_data_compromised': 'Health data'},
'description': 'The health data of 500,000 participants in the UK Biobank was '
'advertised for sale on Alibaba’s e-commerce platforms in '
'China. The data was de-identified and did not include '
'personally identifiable information such as names, addresses, '
'or NHS numbers. The listings have since been removed, and no '
'confirmed purchases were made.',
'impact': {'brand_reputation_impact': 'Troubling exposure of sensitive data',
'data_compromised': 'Health data of 500,000 individuals',
'identity_theft_risk': 'Low (de-identified data)'},
'investigation_status': 'Ongoing',
'motivation': 'Financial Gain',
'references': [{'source': 'UK Government, UK Biobank'}],
'response': {'communication_strategy': 'Public reassurance about '
'de-identified data',
'containment_measures': 'Listings removed from Alibaba’s '
'platform',
'third_party_assistance': 'Collaboration with UK and Chinese '
'governments, Alibaba'},
'title': 'UK Biobank Health Data of 500,000 Individuals Offered for Sale in '
'China',
'type': 'Data Breach'}