Violazioni · 161 giorni fa
The weak point is not the de-identification label. It is the access model that let accredited users pull locally held research data and then surface it outside the controlled platform. Patching is irrelevant here. The failure is governance over who can download, retain, and redistribute sensitive datasets once they leave the source system.
UK Biobank said data from 500,000 volunteers was advertised in three Alibaba listings. The government said no purchases were made and the listings were removed. Three research institutions were identified as the source of the posting, and their access was revoked.
The risk now is persistence. Even without names or contact details, large health datasets can still be re-identified when combined with other records, and the incident shows that trusted research access can become a public resale channel if local controls are too loose.
2 fonti che coprono questa storia
The Record from Recorded Future
Medical data of 500,000 Britons put up for sale on Chinese website
The data is held by the UK Biobank charity and includes genetic sequences, blood samples, medical scans and lifestyle information.
500k Biobank volunteers' data listed for sale on Alibaba
Updated: World's largest biomedical dataset lifted and shifted on Chinese mega marketplace
Part of the PlainSec briefing for 2026-04-23