UK Biobank health data, containing intimate details of over half a million volunteers, were listed for sale on an Alibaba website. The information includes gender, age and socio-economic status but excludes names and addresses.
The incident has sparked concerns about the security of national data infrastructure, with fears that detailed health records could be re-identified. While the data was swiftly removed, the breach has raised questions about access controls and accountability for research institutions.
Professor Naomi Allen, chief scientist at UK Biobank, expressed anger over the incident, calling it a 'rogue researcher' issue. Despite assurances that the data is de-identified, the controversy could dampen public enthusiasm for such projects, potentially affecting future research outcomes.
The situation has prompted calls for stricter controls on data access and heightened scrutiny of international collaborations, particularly with China. As Professor Elena Simperl from King's College London noted, such initiatives are crucial but often underfunded.
In light of this breach, Graeme Stewart, head of public sector at Check Point Software, warns that even 'deidentified' data can pose risks and could lead to a drop in participation rates for vital research projects like UK Biobank.







