Anonymized biomedical data belonging to approximately half a million UK Biobank volunteers was found for sale on the Alibaba e-commerce platform, constituting a data breach. The exact attack vector or method of exfiltration is not yet clear, but the incident underscores the risks of re-identification when anonymized datasets are exposed. No technical vulnerability details, CVSS score, affected software versions, patches, or workarounds are provided in the source article.
Security Operations , Breach , Data Security , Privacy UK Biobank volunteer data appears on Alibaba April 24, 2026 Share By SC Staff (Adobe Stock) Data belonging to volunteers of the UK-based Biobank, which holds a vast biomedical dataset, has been found for sale on the Chinese e-commerce platform Alibaba. The organization confirmed that the information, pertaining to approximately half a million volunteers, was anonymized. However, Biobank acknowledged it could not guarantee that individuals could not be identified if the data fell into unauthorized hands, with further coverage provided by The Register. The discovery was revealed by UK technology minister Ian Murray in the House of Commons on Thursday, coinciding with Biobank's own confirmation of the data issue. While the exact method of how the anonymized data became available on Alibaba is not yet clear, the incident highlights potential vulnerabilities in the handling and dissemination of sensitive biomedical information. Source: The Register SC Staff Related Security Operations NCSC launches SilentGlass to combat display cyberattacks SC Staff April 24, 2026 SilentGlass is a gadget compatible with HDMI and DisplayPort connections that identifies and blocks malicious traffic between a computer and its display. AI/ML AI-driven cloud attacks reach ‘functional’ maturity, says Unit 42 Steve Zurier April 23, 2026 PoC proves that attackers can leverage AI to exploit cloud weaknesses at machine speed. Malware Mustang Panda expands cyber espionage to India’s financial sector and South Korean politics SC Staff April 23, 2026 China-linked hacking group Mustang Panda has broadened its cyber espionage operations, now targeting India's financial sector and political circles in South Korea. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Anonymization Attack Vector Block Cipher Cryptographic Hash Functions Cyclic Redundancy Check (CRC) Diffie-Hellman Digital Certificate Digital Envelope Digital Signature Algorithm (DSA) Digital Signature Standard (DSS) You can skip this ad in 5 seconds