© 2026 Improve the News Foundation.
All rights reserved.
Version 7.4.1
The U.K. government acted quickly and decisively after UK Biobank data was listed for sale on Alibaba — access to the three implicated institutions was revoked, listings were removed before any sales occurred, and a full investigation is underway. The data contained no names, addresses or contact details, keeping participants' personally identifiable information secure. Strong safeguards are being reinforced, and this incident shows the system working as intended when a breach is caught and stopped.
Half a million Britons donated health data in good faith and it ended up listed for sale on Alibaba — genetic records, mental health data, cancer histories, all exposed without consent. The government admits re-identification is still possible even with de-identified data, meaning the risk is real and ongoing. When trust in data sharing collapses, research suffers, and no amount of after-the-fact damage control changes what already happened.