The UK government has launched an investigation after the personal genetic and health data of half a million British volunteers was listed for sale on the Chinese e-commerce platform Alibaba. The data, sourced from the UK Biobank—a world-leading scientific project—was found to be advertised by multiple sellers before the listings were taken down.
Government Response and Investigation
Technology Minister Ian Murray confirmed in the House of Commons that the UK Biobank charity had identified the listings. He described the incident as an "unacceptable abuse" of the data. The data had been legitimately downloaded by three research institutions in China, which have since had their access revoked. Murray thanked the Chinese government for their cooperation in removing the listings and stated that no purchases were made.
Data Security and Anonymization
UK Biobank removes personally identifying information such as names, addresses, dates of birth, and NHS numbers before granting access to researchers. However, Murray could not guarantee that individuals could not be re-identified through advanced data linkage techniques. The dataset includes whole genome sequencing, saliva, blood, and urine samples, as well as dietary surveys, cognitive tests, stress levels, FitBit readings, and full medical histories.
Impact on Research and Public Trust
The UK Biobank, which recruited participants aged 40-69 between 2006 and 2010, has been instrumental in over 18,000 peer-reviewed scientific papers. It provides insights into diseases such as dementia, cancers, and Parkinson's. In response to the breach, the Biobank has temporarily closed access to its research platform. Chief Executive Sir Rory Collins apologized to volunteers, stating that personally identifying information remains safe and secure, and additional security measures are being implemented.
Expert Commentary
Professor Elena Simperl from King's College London emphasized that the incident was an infrastructure problem rather than a complex cyber-attack. She stressed the need for continued investment in maintaining the security of flagship data stewardship projects like the UK Biobank.
