Roughly half a million volunteers' medical records from UK-based Biobank were listed for sale on Alibaba, the UK technology minister revealed.
What was exposed: data on 500k Biobank volunteers
The affected dataset concerns "roughly half a million volunteers" who are participants in UK-based Biobank, the organization that "describes itself as the custodian of the world's most comprehensive biomedical dataset," according to the reporting. The Register's account frames the material as "details of volunteers" from that dataset being made available for purchase.
Where the records appeared: Alibaba's Chinese ecommerce marketplace
The listing was located on the Chinese ecommerce site Alibaba. The Register characterized the incident with the line "World's largest biomedical dataset lifted and shifted on Chinese mega marketplace," and reported that the volunteers' details were "for sale on Chinese ecommerce site Alibaba."
How the disclosure happened: Ian Murray in the House of Commons and Biobank confirmation
The revelation reached public attention when "UK technology minister Ian Murray" spoke in the House of Commons on Thursday and disclosed the matter to Parliament. That ministerial statement coincided with Biobank's own confirmation of a data "mishap," the reporting says: the minister's comments were "delivered at the same time as Biobank confirming the data mishap."
Anonymization and the risk of re‑identification
Biobank told reporters that the data in question were "anonymized," but the organization also made clear that it "could not guarantee it would be impossible to identify individuals if it fell into the wrong hands." That formulation — reported by The Register as Biobank's position — places the incident in a familiar tension: an assertion that records lack direct identifiers coupled with an explicit acknowledgement that anonymization does not eliminate all re‑identification risk.
What this means for Biobank, the UK technology minister, and volunteers
- Biobank: The organization has confirmed a "data mishap" and stated the records were anonymized while acknowledging residual identification risk; that confirmation came contemporaneously with the ministerial disclosure.
- UK technology minister Ian Murray: The issue was raised publicly in the House of Commons when Ian Murray disclosed the presence of the material on Alibaba, making the matter a question for parliamentary attention.
- Volunteers enrolled in Biobank: Personal details linked to "roughly half a million volunteers" were listed for sale; Biobank's statement that anonymization cannot be guaranteed to prevent identification directly addresses the exposure risk to those volunteers should the data fall "into the wrong hands."
The Register noted this is a breaking story and that it "will provide additional information in due course." At this stage the public record in the reporting consists of the ministerial disclosure in the House of Commons, Biobank's confirmation of a mishap and its statement on anonymization and identification risk, and the listing's location on Alibaba's marketplace.
https://go.theregister.com/feed/www.theregister.com/2026/04/23/500k_biobank_volunteers_data_listed/
