- Medical data from 500,000 UK Biobank volunteers was improperly listed for sale on Alibaba by rogue researchers.
- The archive contained anonymized health information used in thousands of scientific studies, but no personal identifiers like names or addresses.
- Access for the institutions involved has been revoked, and officials confirmed the listing was removed before any purchase occurred.
Medical information of half a million UK citizens ended up for sale on none other than Alibaba, after “rogue researchers” put it there.
Between 2006 and 2010, an independent, non-profit research organization called UK Biobank collected health data from 500,000 volunteers in the UK. Supported by bodies like the UK Medical Research Council, Wellcome Trust, and National Health Service, and with the goal of enabling large-scale health research, the project collected anonymous information such as gender, age, month and year of birth, socioeconomic status, lifestyle habits, and measures from different biological samples.
According to the BBC, the UK Biobank project resulted in more than 18,000 scientific publications and has been used to improve the detection and treatment of dementia, certain cancers, and Parkinson’s. The volunteers were aged 40 - 69 at the time the data was collected.
Legitimate download
Earlier today, news broke that someone tried to sell the entire database on Alibaba, one of the largest online e-marketplaces in China, and the world. This was confirmed by the UK’s technology minister, Ian Murray, who confirmed that personally identifiable information, such as names, addresses, emails, or phone numbers, were not leaked. "This was a legitimate download by a legitimately accredited organization," he said. "That is the problem that's been identified."
Chief Executive Professor Sir Rory Collins also commented, saying that the data was available to researchers at three institutions, and that Alibaba removed it in the meantime. The institutions, which were not named, have had their access revoked, Sir Rory confirmed.
Murray said that no one bought the archive before it was pulled offline. Speaking to the BBC, UK Biobank's chief scientist Prof Naomi Allen said that "ultimately it's the fault of these rogue researchers".
Usually, when cybercriminals obtain such databases, they offer to sell it on the dark web, not a legitimate website like Alibaba, which makes this incident all the more curious.
Via BBC
