{“lastseen”:”2026-04-24T14:07:19″,”description”:”Half a million Britons signed up to help cure cancer. Their data ended up for sale on Alibaba.\\n\\nThe UK Biobank charity informed the British government of an incident concerning the medical data belonging to 500,000 British citizens being offered for sale on the Chinese e-commerce website Alibaba.\\n\\nThe National Data Guardian, Dr Nicola Byrne, said in a statement:\\n\\n\\u003e \u201cPeople who generously share their health data to benefit others through medical research rightly expect it to be kept safe and for there to be accountability when things go wrong.\u201d\\n\\nOfficials said the researchers downloaded the data under a legitimate contract, but its appearance on Alibaba shows how \\”approved\\” access can still turn into public exposure.\\n\\nUK Biobank holds more than 15 million biological samples and detailed health records from volunteers recruited between 2006 and 2010, and researchers worldwide use it to study cancer, dementia, diabetes, and other chronic diseases.\\n\\nUK Biobank normally signs contracts with vetted universities and private companies before it lets them access the data, but investigators traced the Alibaba listings to three research institutions. UK Biobank revoked their access and paused new data access while it strengthens security controls.\\n\\nAt least one listing reportedly contained data on all 500,000 volunteers, and Alibaba and Chinese authorities removed the adverts before anyone could confirm a sale.\\n\\nThe dataset comes from UK Biobank\u2019s long\u2011running research cohort and includes genetic sequences, blood samples, medical imaging, and detailed lifestyle information used for global health research.\\n\\nUK Biobank emphasizes that the data was \u201cde\u2011identified,\u201d meaning it didn’t include names, addresses, or NHS numbers. But it still contained granular demographics, such as gender, age, birth month\/year, socioeconomic indicators, lifestyle details, and health measures. We have repeatedly seen that such data can be re\u2011linked to individuals by cross\u2011referencing with other public or commercial records.\\n\\n## Why China cares\\n\\nUS intelligence, policy reports, and academic work paint a consistent picture: China treats large, diverse human genomic and health datasets as a strategic resource for both economic and security reasons.\\n\\nThe US National Counterintelligence and Security Center (NCSC) explicitly states that the People\u2019s Republic of China views bulk healthcare and genomic data as a \u201cstrategic commodity\u201d to drive its biotech, AI, and precision medicine industries, and has invested billions in national genomics and precision\u2011medicine initiatives.\\n\\nLarge datasets from non\u2011Chinese populations are particularly valuable for building AI models and improving the global commercial competitiveness of Chinese pharma and biotech.\\n\\nFrom an attacker\u2019s or foreign intelligence perspective, UK Biobank is a \u201ccrown jewel\u201d asset: It\u2019s curated, high\u2011quality, population\u2011scale, and much more useful than random breach dumps. And because genetic data is immutable (unlike a password, it cannot be replaced), any compromise has very long\u2011term intelligence usefulness.\\n\\nLast year, the Guardian reported that one in five successful UK Biobank access applications came from Chinese entities, including BGI, China\u2019s flagship genomics company that was later placed on the US Entity List over concerns about its role in surveillance of minority populations.\\n\\nChina is not just stockpiling DNA for curiosity\u2019s sake. It is building a global genomic map that covers adversaries as well as its own citizens.\\n\\n## Your genome data\\n\\nThere have been major concerns about genetic data ending up in the wrong hands, and for good reason. But I\u2019m not going to say that volunteering your medical data for research is bad. Researchers often put the data to good use to help others.\\n\\nBut there are some good questions to ask before doing so.\\n\\n * **Who runs the project and where is it based?** \\nPrefer non\u2011profit or academic biobanks with clear public\u2011interest mandates and strong oversight, rather than opaque commercial data brokers.\\n * **How do they store the collected data?** \\nAsk specifically about genomic data, raw sequencing files, links to medical records, and whether data is encrypted at rest and in transit.\\n * **Who can access the data and under what controls?** \\nLook for a formal access committee, strict contracts, and technical controls like secure analysis environments and limited export options, not \u201cdownload CSV and walk away\u201d models like the one that enabled the UK Biobank incident.\\n * **Are foreign entities allowed to access or copy the data?** \\nIn light of US and UK government warnings about Chinese access to Western genomic data, it\u2019s reasonable to ask whether data can be accessed, processed, or stored in jurisdictions with different security expectations.\\n * **How do they handle re\u2011identification risk?** \\nAs we\u2019ve discussed, \u201cde\u2011identified\u201d is not a magic word. Privacy experts and US intelligence have warned that health and genomic data can often be re\u2011identified when combined with other datasets.\\n\\n\\n\\nIf data containing your DNA is in someone else\u2019s hands, you can\u2019t put it back, but you can demand better governance, push institutions to treat genomic data as national\u2011security\u2011grade sensitive.\\n\\nIt also requires more skepticism of highly targeted scams. Attackers can use large combined datasets to craft convincing spear\u2011phishing or health\u2011related scams, for example, contacting you about a specific condition you or a family member has. Treat unsolicited health or DNA\u2011related emails, calls, and apps with extra suspicion.\\n\\n* * *\\n\\n**What do cybercriminals know about you?**\\n\\nUse Malwarebytes\u2019 free **Digital Footprint scan** to see whether your personal information has been exposed online.\\n\\nSCAN NOW”,”published”:”2026-04-24T12:32:20″,”modified”:”2026-04-24T12:32:20″,”type”:”malwarebytes”,”title”:”Medical data of 500,000 UK volunteers listed for sale on Alibaba”,”source”:””,”references”:””,”id”:”MALWAREBYTES:C3D2F4379A3B74B4BAB9B874A41D337C”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2026\/04\/medical-data-of-500000-uk-volunteers-listed-for-sale-on-alibaba”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-24T14:07:19″,”description”:”Half a million Britons signed up to help cure cancer. Their data ended up for sale on Alibaba.\\n\\nThe UK Biobank charity informed the British government…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-49201","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n