Computerweekly UK Biobank Data Breach: Medical Records Listed for Sale Online
Article Content
- •Data from 500,000 UK Biobank volunteers was listed for sale on Alibaba.
- •The breach involved anonymized health data, raising privacy concerns.
- •Access for implicated Chinese institutions has been suspended.
A significant data breach at UK Biobank has resulted in the medical records of 500,000 volunteers being listed for sale on the Chinese e-commerce platform Alibaba. The breach was confirmed by UK technology minister Ian Murray, who stated that the data was anonymized but could still pose privacy risks. The compromised information includes demographic details such as age, gender, and lifestyle habits, but does not contain direct identifiers like names or addresses. The breach has raised serious concerns about data handling practices at UK Biobank, a major biomedical research resource. UK Biobank has suspended access for three Chinese research institutions implicated in the breach and is investigating the incident. The UK and Chinese governments, along with Alibaba, acted swiftly to remove the listings. No evidence has been found that any data was sold or downloaded. UK Biobank has announced plans to enhance data protection measures in response to the incident.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (13)
Following this threat?
Track Alibaba in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…