The British government has launched an investigation after sensitive health research data from a major UK charity was reportedly advertised for sale on online marketplaces linked to
Chinese tech giant Alibaba.
Science Minister Ian Murray told Parliament on Thursday that UK Biobank, a leading biomedical database, alerted officials earlier this week after discovering its data had been listed for sale in three separate postings by independent vendors. One of the datasets appeared to involve information relating to as many as 500,000 participants.
UK Biobank, which provides anonymised data to vetted researchers worldwide, reassured authorities that the compromised files did not include personally identifiable information such as names, addresses, or contact details. According to Murray, there is no evidence that any of the data was purchased before the listings were removed.
“The government has engaged directly with the vendor, and they do not believe any transactions took place prior to the removal of these listings,” Murray said.
The UK government has since coordinated with UK Biobank, the Chinese authorities, and the platform operator to ensure the data was taken down swiftly. Access has also been revoked for three research institutions believed to be the source of the breach.
Security concerns trigger internal review
In a statement published on its website, UK Biobank described the incident as a serious violation of its strict data-use agreements. The organisation confirmed it has launched a full internal investigation led by its board.
As a precaution, the charity has temporarily suspended access to its research platform while implementing enhanced security measures. These include stricter limits on data exports and improved monitoring systems to detect unusual download activity.
Despite the breach, UK Biobank stressed there is no indication that participants have been identified or harmed as a result.
Murray condemned the incident as “an unacceptable misuse” of sensitive research data and confirmed that the case has been referred to the Information Commissioner’s Office for further scrutiny.
Alibaba under scrutiny
Alibaba, one of the world’s largest e-commerce and cloud computing companies, operates multiple online marketplaces that connect global buyers and sellers. While the platform itself does not typically own the goods listed, it has faced increasing international pressure in recent years over the monitoring of third-party vendors and the sale of sensitive or restricted materials.
The latest incident is likely to intensify calls for stricter oversight of digital marketplaces, particularly when it comes to the handling and potential misuse of large-scale data sets.
The investigation remains ongoing. Photo by N509FZ, Wikimedia commons.
