BackSCIENCE_HEALTH
UK Biobank data incident caused by 'a few bad apples', boss says
UK Biobank chief Sir Rory Collins said a 'few bad apples' caused the incident in which de-identified medical data for about 500,000 participants appeared for sale on Alibaba. The listings were removed before any sale, and the Biobank suspended online access to its research platform as safeguards were tightened. Authorities, including the ICO, opened inquiries as a board-led investigation was announced.
Why It Matters
The case highlights risks around de-identified health data and how research platforms balance openness with security, potentially affecting public trust in large-scale health data projects.
Timeline
6 Events
Comprehensive forensic board-led investigation announced
April 24, 2026
UK Biobank said there would be a comprehensive and forensic board-led investigation of the incident.
Sir Rory Collins blames 'a few bad apples' for the incident
April 24, 2026
Professor Sir Rory Collins, the boss of UK Biobank, described the incident as caused by a 'few bad apples'.
UK Biobank suspends online research platform to strengthen controls
April 24, 2026
UK Biobank said it would temporarily suspend all access to its online research platform and implement additional controls to prevent a recurrence.
ICO informed and launching enquiries
April 23, 2026
The Information Commissioner's Office said it had been informed of the incident and was making enquiries.
Technology minister confirms data did not include personal identifiers
April 23, 2026
Technology minister Ian Murray told MPs that the data involved did not include participants' names, addresses, contact details or telephone numbers, but could include gender, age, birth month/year, socioeconomic status, lifestyle habits, and biological measures.
Alibaba listings of UK Biobank datasets posted for sale; removed after swift action by authorities
April 23, 2026
Datasets containing de-identified information about Biobank volunteers, made available to researchers at three academic institutions, were posted for sale on Alibaba. The government said the listings were swiftly removed before any purchase could take place and credited swift cooperation with the UK and Chinese governments to remove the data.