Skip to content
UK Biobank to Reopen After Data Breach Exposing 500,000 Records

UK Biobank to Reopen After Data Breach Exposing 500,000 Records

First seen 27 Oct 2026, 01:26 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 08:13 UTC
  • •UK Biobank's data breach involved 500,000 participant records sold online.
  • •Access to the research platform was suspended in April 2026 due to the breach.
  • •New security measures include two-factor authentication and manual output checks.

The UK Biobank is set to reopen its research analysis platform following a significant data breach that exposed the health data of 500,000 participants. Access was suspended in April 2026 after sensitive data was found for sale on Alibaba. An independent cybersecurity firm has confirmed the platform's security has been restored. The organization is implementing a phased reintroduction of researchers, with new security measures including mandatory two-factor authentication and a manual output checking system for file downloads. Some researchers remain barred from access due to non-compliance with data deletion requirements. The UK Biobank is awaiting final approval from government health data controllers to resume operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-01
Data breach discovered
UK Biobank suspended access after discovering participant data for sale on Alibaba.
Researchprofessionalnews
2026-10-22
Platform security confirmed
UK Biobank announced that an independent cybersecurity firm verified the platform's security.
Researchprofessionalnews
2026-10-26
Phased reopening planned
UK Biobank announced plans to gradually reintroduce researchers to the platform pending government approval.
Scworld

More articles in this cluster (4)

Following this threat?

Track UK Biobank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What data was compromised?
The breach exposed health data from 500,000 participants, which was found for sale online.
What security measures are being implemented?
New measures include two-factor authentication, inactivity timeouts, and a manual output checking system.
When will researchers regain access?
Access is pending final approval from government health data controllers, with a phased reopening planned.