Confidential UK medical data linked to a major research project appeared for sale on a Chinese online platform, raising serious concerns over data security and privacy.
UK Technology Minister Ian Murray told Parliament that information connected to around 500,000 volunteers appeared in listings on Alibaba. The data came from the UK Biobank research database. Officials quickly launched an investigation after discovering the listings earlier this week. In response, authorities worked with the UK Biobank charity, the Chinese government, and Alibaba to remove the material. As a result, all identified listings disappeared from the platform shortly after the alert.
Moreover, the government confirmed that UK Biobank suspended access for the institutions linked to the breach. It also requested a temporary pause on further data access. Therefore, researchers cannot currently download additional datasets while security systems undergo review. UK Biobank operates as an independent medical research charity. It collects health data from volunteer participants across the UK. In addition, it supports global research into diseases such as cancer, heart conditions, and dementia.
Officials stressed that the exposed data did not include names, addresses, or contact details. However, concerns remain over how the information appeared on a commercial marketplace. Consequently, the organisation has launched a full internal investigation. Professor Sir Rory Collins, who leads UK Biobank, confirmed the listings violated strict data-sharing agreements. He explained that the charity removed access for the parties involved. Furthermore, he reassured participants that their identities remain protected.
At the same time, the UK government described the incident as extremely serious. It also confirmed plans to issue updated guidance on research data protection. Therefore, further safeguards may follow in the coming months.
Importantly, the government praised cooperation from Chinese authorities during the removal process. Officials said the response helped prevent any confirmed sales of the data. As a result, they believe no transactions took place before deletion. Meanwhile, UK Biobank continues to support international scientific research despite the setback. The organisation argued that controlled data sharing remains essential for medical progress. However, it also acknowledged the need for stronger protections.
In addition, the incident has renewed debate over how sensitive research data moves across borders. Policymakers now face pressure to tighten rules around storage and access. Consequently, future collaboration agreements may face stricter oversight. The case highlights growing challenges in protecting large-scale health databases. While investigators continue their work, authorities aim to prevent similar breaches in the future.
For more updates on this news, follow London Pulse News.

