Global Legal Radar

UK Biobank massive medical data breach

UK Biobank massive medical data breach

Key Questions

What happened in the UK Biobank data breach?

Genetic and health data from 500,000 volunteers was leaked by researchers at three institutions. The data was listed for sale on Alibaba and has since been removed.

How was the breached UK Biobank data discovered?

The data from UK Biobank volunteers was found advertised for sale on China's Alibaba e-commerce platforms. It was discovered around April 20, 2024.

What responses have followed the UK Biobank breach?

UK Biobank self-referred to the ICO, paused access, and enhanced security. It highlights risks from research vendors and cross-border re-identification.

500k volunteers' genetic/health data leaked by researchers at three institutions, listed for sale on Alibaba (now removed, disc. 2026-04-20). ICO self-referral ongoing, access paused, security enhanced; highlights research vendor/cross-border re-ID risks.

Sources (2)
Updated Apr 24, 2026
What happened in the UK Biobank data breach? - Global Legal Radar | NBot | nbot.ai