UK Biobank data listings in China trigger probe, no personal identifiers exposed

[GETTY IMAGES]

The UK government has confirmed that health data linked to 500,000 volunteers in the UK Biobank was briefly advertised for sale on a Chinese e-commerce platform, prompting an investigation and political scrutiny.

Technology minister Ian Murray told MPs, as reported by BBC News, that “information of all members of the database was found listed for sale on the website Alibaba,” referring to Alibaba. He added that the charity running the Biobank alerted the government earlier in the week.

Murray emphasized that the dataset did not include direct identifiers. According to BBC News, he said the information “did not include names, addresses, contact details or telephone numbers,” though it could contain details such as “gender, age, month and year of birth, socioeconomic status, lifestyle habits, and measures from biological samples.”

The listings have since been removed, and Murray said authorities were informed that “no purchases were made from the three listings on the website.” He also thanked Chinese authorities for their cooperation in resolving the issue.

In a message to participants cited by BBC News, Biobank chief executive Professor Sir Rory Collins acknowledged concerns, stating: “We understand that the existence of these listings, even temporarily, will be concerning to you.” He added reassurance that “all the data are de-identified; they do not contain any personally identifying information.”

However, Collins described the incident as serious, saying the data’s appearance online amounted to “a clear breach of the contract signed by these academic institutions.” The dataset had been legitimately accessed by researchers at three institutions, but their access has now been suspended.

The Biobank has responded by tightening controls, including temporarily suspending access to its research platform, limiting file exports and introducing daily monitoring “for any suspicious behaviour,” BBC News reported. A “comprehensive and forensic Board-led investigation” is also underway.

The Information Commissioner’s Office confirmed it is examining the case. In comments reported by BBC News, a spokesperson said: “People’s medical data is highly sensitive information… organisations also have a responsibility under the law.”

Political reaction has been swift. Liberal Democrat technology spokesperson Victoria Collins described the situation as a “profound betrayal,” calling for accountability. Meanwhile, Richard Tice labeled the episode a “China data theft scandal.”

Murray rejected that framing, stressing the breach was not the result of hacking. “This was not a leak or cyber-attack,” he said, according to BBC News. “This was a legitimate download by a legitimately accredited organisation.”

He also defended international research ties, noting that “thousands of Chinese researchers” have worked with Biobank data “safely and securely” since 2012.

Some participants appear unconcerned. Biobank volunteer Polly Toynbee told BBC News she believed the anonymised nature of the data would limit risks, saying she did not think the incident would “rattle all the magnificent volunteers.”