A data leak shut a top research biobank: lessons from the recovery
September 16, 2026

(Nature) – UK Biobank is imposing new safety measures after a security incident, but safeguarding biomedical data while enabling researcher access remains a challenge.
On a Tuesday in mid-April, UK Biobank — one of the largest and most comprehensive health-tracking studies in the world — received a troubling e-mail from an anonymous researcher. The sender had discovered what appeared to be sensitive information from hundreds of thousands of the study’s participants for sale on Xianyu, an e-commerce website owned by the Chinese technology company Alibaba.
With the help of Alibaba and the governments of the United Kingdom and China, UK Biobank managed to get the listing removed. Still, the incident raised concerns about data security, spurred an internal investigation and led the biobank to cut off access for researchers while it built new infrastructure to secure its data. After nearly five months offline, the biobank says it is trying to re-open to researchers as quickly as possible. (Read More)