Data Breach of UK Biobank Members Confirmed
The personal health data of 500,000 participants in the UK's UK Biobank project was found listed for sale on an online platform in China, according to confirmation from the UK government.
Technology Minister Ian Murray informed Members of Parliament that the entire dataset of UK Biobank members was discovered being offered for sale on Alibaba's website. The charity responsible for managing UK Biobank notified the government about the breach on Monday. Murray emphasized that the compromised information did not include personally identifiable details such as names, addresses, contact information, or phone numbers.
Alibaba and UK Biobank Responses
Alibaba has been approached for comment regarding the listings. UK Biobank, a repository of health data used to advance research in areas such as dementia, various cancers, and Parkinson's disease, stated that it is actively investigating the incident. The organization expressed gratitude for the assistance and cooperation received from both the UK and Chinese governments, as well as from Alibaba.
Chief Executive Professor Sir Rory Collins addressed participants directly, acknowledging the concern caused by the temporary existence of the listings.
"We understand that the existence of these listings, even temporarily, will be concerning to you," said Sir Rory Collins. "We want to reassure you that all the data are de-identified; they do not contain any personally identifying information (such as names, addresses, dates of birth, and NHS numbers)."
Government Actions and Official Statements
Minister Murray added that the government has been informed no transactions were completed from the three listings found on Alibaba’s platform. The listings have since been removed, and the UK government expressed appreciation for the cooperation of Chinese authorities in addressing the matter.
"The UK Biobank charity informed the government that it had identified that data had been advertised for sale by several sellers on Alibaba e-commerce platforms in China," Murray stated.
An Information Commissioner's Office spokesperson highlighted the sensitivity of medical data and the legal responsibilities of organizations handling such information.
"People's medical data is highly sensitive information, not only do people expect it to be handled carefully and securely, organisations also have a responsibility under the law. UK Biobank has made us aware of an incident and we are making enquiries."
Additional Information
Additional reporting by Liv McMahon.
Readers interested in following major technology news and trends can for the Tech Decoded newsletter, which delivers the world’s biggest tech stories every Monday.
Outside the UK? here.
