{"id":546659,"date":"2026-04-23T15:50:14","date_gmt":"2026-04-23T15:50:14","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/546659\/"},"modified":"2026-04-23T15:50:14","modified_gmt":"2026-04-23T15:50:14","slug":"private-health-records-of-half-a-million-britons-offered-for-sale-on-chinese-website-data-and-computer-security","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/546659\/","title":{"rendered":"Private health records of half a million Britons offered for sale on Chinese website | Data and computer security"},"content":{"rendered":"<p class=\"dcr-130mj7b\">The confidential health records of half a million British volunteers have been offered for sale on Chinese website <a href=\"https:\/\/www.theguardian.com\/business\/alibaba\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">Alibaba<\/a>, the UK government has confirmed.<\/p>\n<p class=\"dcr-130mj7b\">The data, belonging to participants in the UK Biobank project, was found for sale on three separate listings last week. The records have now been removed and it is not believed any sales were made.<\/p>\n<p class=\"dcr-130mj7b\">The latest breach comes after the Guardian revealed last month that UK Biobank data <a href=\"https:\/\/www.theguardian.com\/science\/2026\/mar\/14\/confidential-health-records-exposed-online-uk-biobank\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">had been exposed online dozens of times<\/a> and will raise further questions about whether security has been too lax.<\/p>\n<p class=\"dcr-130mj7b\">Ian Murray, the technology minister, told the Commons: \u201cOn Monday 20 April, the UK Biobank charity informed the government that it had identified their data had been advertised for sale by several sellers on Alibaba\u2019s e-commerce platforms in <a href=\"https:\/\/www.theguardian.com\/world\/china\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">China<\/a>.<\/p>\n<p class=\"dcr-130mj7b\">\u201cBiobank told us that three listings that appear to sell \u2026 Biobank participation data had been identified. At least one of these three datasets appeared to contain data from all 500,000 UK Biobank volunteers.\u201d<\/p>\n<p class=\"dcr-130mj7b\">The data found for sale was \u201cde-identified\u201d, meaning it does not include names, addresses or precise dates of birth.<\/p>\n<p class=\"dcr-130mj7b\">The UK Biobank holds the health data of 500,000 volunteers, including genome sequences, brain scans, blood samples and diagnostic records. Scientists at universities and private companies across the world apply for access and, until late 2024, were free to download data directly on to their own computer systems \u2013 something that experts have repeatedly warned posed a security risk.<\/p>\n<p class=\"dcr-130mj7b\">In February, the health secretary, Wes Streeting, signed a <a href=\"https:\/\/www.ukbiobank.ac.uk\/news\/major-milestone-for-health-research-as-uk-government-decision-enables-access-to-uk-biobank-volunteers-gp-patient-data\/\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">legal direction<\/a> that allowed the coded GP data of all volunteers\u2019 to be shared with UK Biobank for the first time.<\/p>\n<p class=\"dcr-130mj7b\">Murray said the government worked with Biobank, the Chinese government and Alibaba to have the listings removed. \u201cI want to thank the Chinese government for the speed and seriousness with which they worked with us to help remove those listings and the ongoing work to remove any further listings,\u201d he said.<\/p>\n<p class=\"dcr-130mj7b\">\u201cSecondly, we ensured that the Biobank charity revoked access to the three research institutions identified as the source of that information. Thirdly, we have asked that Biobank charity pause further access to its data until they have put in place a technical solution to prevent data from its current platform from being downloaded.\u201d<\/p>\n<p class=\"dcr-130mj7b\">He said Biobank worked with only \u201caccredited organisations and institutions and individual academic researchers\u201d, adding: \u201cThis was not a leak. This was a legitimate download by a legitimately accredited organisation.\u201d<\/p>\n<p class=\"dcr-130mj7b\">UK Biobank has referred itself to the Information Commissioner\u2019s Office.<\/p>\n<p class=\"dcr-130mj7b\">Prof Rory Collins, chief executive and principal investigator of UK Biobank, said: \u201cWe take the protection of participants\u2019 data extremely seriously and do not tolerate any form of data misuse. With support from the UK government, Chinese authorities and Alibaba, three listings for de-identified data were swiftly removed before a sale was made. The actions of these individuals are a clear breach of the contract they signed with UK Biobank and they, along with their academic institutions, immediately had their access suspended.<\/p>\n<p class=\"dcr-130mj7b\">\u201cWe apologise for the concern this will cause and have already put in place technology, processes and a board-led review to stop this happening again. We have also taken our research platform offline whilst we add a further upgrade that helps prevent de-identified data being taken out of the platform. We expect this to take three weeks. Our existing plans to implement an automated \u2018airlock\u2019 that checks files and data continues at pace.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"The confidential health records of half a million British volunteers have been offered for sale on Chinese website&hellip;\n","protected":false},"author":2,"featured_media":546660,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[49,50,51,47,52,48],"class_list":["post-546659","post","type-post","status-publish","format-standard","has-post-thumbnail","category-headlines","tag-headlines","tag-news","tag-top-news","tag-top-stories","tag-topnews","tag-topstories"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/546659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=546659"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/546659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/546660"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=546659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=546659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=546659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}