UK Biobank's De-Identified Data LeakUK Biobank's De-Identified Data LeakCoverage from The Guardian, Times Higher Education, and others
00/00/0000
DailyWeekly
UK Biobank data covering about 500,000 volunteers was reportedly uploaded to online repositories and later offered for sale through Alibaba-linked listings after legitimate access was granted to three research institutions.
Although officials said the records lacked direct identifiers such as names and addresses, the data reportedly included detailed health, demographic, socioeconomic, lifestyle, and biological measures that could create re-identification risks when combined with other information. UK Biobank revoked access, removed listings, paused platform access, and began investigations, intensifying scrutiny of how biomedical datasets are downloaded, monitored, and shared.
Looking Back
141 Day Timeline
Articles published over time. Hover any bar for the period and its article count.
Mar 12
Apr 5
Apr 26
May 20
Jun 13
Jul 4
Jul 28
History
09/21/2026
The story is now more specifically defined as a large-scale exposure involving roughly 500,000 volunteers and downloads by three Chinese research institutions. UK Biobank's forensic investigation and platform-access pause add concrete containment and oversight measures beyond the earlier pattern of takedowns and access revocation.
UK Biobank temporarily blocked researcher access after anonymised medical data was offered for sale online in China, prompting scrutiny of research data governance.
5/25/2026 • Data Breaches & Exposure Events • General
UK Biobank volunteer biomedical data appeared on Alibaba in 2025 after authorized academic access, prompting scrutiny of de-identification and data containment.
4/28/2026 • Data Breaches & Exposure Events • General
Lloyds Banking Group paid further goodwill compensation to customers after a 12 March banking app programming error exposed transaction details, according to UK Treasury Select Committee correspondence.
4/28/2026 • Data Breaches & Exposure Events • General
UK officials confirmed 500,000 UK Biobank participant health records were offered for sale online in China via Alibaba, after China access by research institutions was revoked and listings removed.
4/23/2026 • Data Breaches & Exposure Events • General
Rory Collins announced a temporary UK Biobank access pause after de-identified volunteer data was offered for sale online in China in April 2026, leading to a forensic investigation.
4/23/2026 • Data Breaches & Exposure Events • General
ExfilSquad reportedly stole more than 740,000 records from UK education and police systems on July 30, 2026, prompting investigations and Information Commissioners Office notifications.
7/30/2026 • Data Breaches & Exposure Events • General
UK Biobank reported 18 months of security work after an anonymous tip led to Alibaba e-commerce listings tied to Chinese-linked researchers offering biomedical data.
4/26/2026 • Data Breaches & Exposure Events • General
Lloyds Bank, Halifax, and Bank of Scotland assessed UK GDPR breach-notification duties after mobile app users reported brief visibility of other customers transaction data.
3/17/2026 • Cybersecurity (Privacy-Relevant) • General
The UK Government survey for 2025/2026, using thousands of business submissions, finds phishing-led breaches persist while AI risk controls and supplier personal-data assessments remain limited.
5/14/2026 • Cybersecurity (Privacy-Relevant) • General
AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
