UK Biobank members health data listed for sale online, government confirms

The health data of half a million members of the UK’s health data project, UK Biobank, was for sale online in China, the UK Government has confirmed.  

Technology minister Ian Murray said the information was found listed on the website Alibaba. 

Murray confirmed to MPs that the charity in charge of the health data project informed the government of the data breach on Monday. However, he said the government has been informed that no purchases were made from the three listings.  

It is believed that the information involved in the breach does not include names, addresses, contact details, or telephone numbers.  

The UK Biobank is a collection of data used to work towards the improvement of dementia, certain cancers, and Parkinson’s.  

It confirmed that it was investigating the incident. It also thanked Alibaba and the UK and Chinese governments for their support.  

In a message to its members, chief executive Rory Collins said: “We understand that the existence of these listings, even temporarily, will be concerning to you.” 

He added: “We want to reassure you that all the data are de-identified; they do not contain any personally identifying information (such as names, addresses, dates of birth, and NHS numbers).” 

The listings have been removed from Alibaba.  

Murray said: “The UK Biobank charity informed the government that it had identified that data had been advertised for sale by several sellers on Alibaba e-commerce platforms in China.” 

A spokesperson for the Information Commissioner's Office said: “People's medical data is highly sensitive information, not only do people expect it to be handled carefully and securely, organisations also have a responsibility under the law. 

“UK Biobank has made us aware of an incident and we are making enquiries.”