Finance
UK Investigates After Big Health Dataset Listed for Sale on China's Alibaba
Published by Global Banking & Finance Review®
Posted on April 23, 2026
2 min readLast updated: April 23, 2026
Add as preferred source on GoogleQuick Summary
UK government is probing how anonymised UK Biobank data for around 500,000 volunteers was listed for sale on Alibaba’s Chinese platforms. Listings have been removed, no purchases confirmed, and access paused while safeguards are strengthened.
UK investigates after big health dataset listed for sale on China's Alibaba
Government Response to UK Biobank Data Breach
By Sam Tabahriti
Discovery of the Data Breach
LONDON, April 23 (Reuters) - Britain is investigating how data from a health charity came to be advertised for sale on China's Alibaba, a government minister said on Thursday, including one dataset that appeared to contain information from 500,000 people.
Science minister Ian Murray told lawmakers that the charity, UK Biobank, had informed the government on Monday that its data appeared to have been advertised for sale in three different listings by several sellers on Alibaba's e-commerce platforms.
Details of the Data Involved
UK Biobank, a health research charity that provides anonymised data to accredited researchers, said the data from its 500,000 volunteers did not include their names, addresses, contact details or telephone numbers, Murray said.
Actions Taken by Authorities
"The government has spoken to the vendor today and they do not believe that there were any purchases from the three listings before they were taken down," Murray said.
He added that the government had worked with UK Biobank, the Chinese government and the vendor to have the listings removed, and that the charity had revoked access to three research institutions identified as the source of the data.
Breach Prompts Security Overhaul
BREACH PROMPTS SECURITY OVERHAUL
UK Biobank's Response
In a message published on its website, UK Biobank described the incident as a clear breach of contractual obligations and said it would carry out a comprehensive board-led investigation into the incident.
The charity said it had temporarily suspended all access to its research platform while additional security measures were put in place to limit the size of files that can be exported and to monitor downloads for suspicious activity.
Assurances on Data Privacy
UK Biobank confirmed the data involved did not contain personally identifying information and said that there was no evidence of participants being identified against their will.
Government's Position and Next Steps
Murray, who described the incident as an unacceptable abuse of UK Biobank's data and said the government took the matter "extremely seriously," said the charity had referred itself to the Information Commissioner's Office.
(Reporting by Sam Tabahriti; editing by Sarah Young)
Key Takeaways
- •UK Biobank discovered anonymised health data being offered on Alibaba and alerted the government, prompting an investigation (news.sky.com)
- •Listings were taken down swiftly with support from UK and Chinese authorities; no confirmed purchases, and data access suspended pending technical safeguards (news.sky.com)
- •UK Biobank revoked access for three implicated research institutions and referred itself to the Information Commissioner’s Office; previously it has issued numerous takedown notices for accidental data exposures (crowdbyte.ai)
References
Frequently Asked Questions about UK investigates after big health dataset listed for sale on China's Alibaba
1What happened in the UK Biobank data breach incident?
Data from UK Biobank was advertised for sale on China's Alibaba platforms, affecting up to 500,000 people, prompting a UK government investigation.
2Was personal information such as names or contact details exposed in the breach?
UK Biobank stated that the dataset did not include names, addresses, contact details, or telephone numbers of the volunteers.
3What actions did the UK government take after discovering the data sale?
The UK government worked with UK Biobank, the Chinese government, and the vendor to remove the listings and revoked access for the implicated research institutions.
4Has access to UK Biobank data been affected?
Access to UK Biobank data was paused while technical measures were implemented to prevent bulk downloads.
5Who is leading the investigation into the UK Biobank breach?
The UK government, along with the Information Commissioner's Office, is leading the investigation after UK Biobank self-reported the incident.
