Medical information of 500,000 participants of one of the UK’s landmark scientific programmes, UK Biobank, were offered for sale online in China, the government has confirmed.<\/p>\n
Technology minister Ian Murray said information of all members of the database was found listed for sale on the website Alibaba.<\/p>\n
Murray told MPs the charity which runs UK Biobank had told the government about the breach on Monday. He said the information did not include names, addresses, contact details or telephone numbers.<\/p>\n
However he said it could include gender, age, month and year of birth, socioeconomic status, lifestyle habits, and measures from biological samples.<\/p>\n
The Biobank is a collection of health data offered by volunteers which has been used to help improvements in detection and treatment of dementia, some cancers and Parkinson’s.<\/p>\n
It has collected intimate details – including whole body scans, DNA sequences and their medical records – from hundreds of thousands of volunteers for over two decades. The project has led to more than 18,000 scientific publications.<\/p>\n
Participants were aged from 40 to 69 when they were recruited between 2006 and 2010.<\/p>\n
UK Biobank said it was investigating the incident and thanked the UK and Chinese governments, as well as Alibaba, for support and cooperation.<\/p>\n
\u00ab\u00a0We understand that the existence of these listings, even temporarily, will be concerning to you,\u00a0\u00bb Chief Executive Professor Sir Rory Collins said in a message to participants.<\/p>\n
\u00ab\u00a0We want to reassure you that all the data are de-identified; they do not contain any personally identifying information (such as names, addresses, dates of birth, and NHS numbers).\u00a0\u00bb<\/p>\n
Sir Rory told volunteers in his letter the data involved in the incident had been made available to researchers at three institutions.<\/p>\n
He added the data was \u00ab\u00a0swiftly\u00a0\u00bb removed by Alibaba, following support from the UK and Chinese government, but the data’s appearance to a \u00ab\u00a0clear breach of the contract signed by these academic institutions\u00a0\u00bb.<\/p>\n
\u00ab\u00a0They, along with the individuals involved, have had their access suspended,\u00a0\u00bb Sir Rory added.<\/p>\n
Murray told MPs the government has been told no purchases were made from the three listings on the website.<\/p>\n
Alibaba has been contacted for comment.<\/p>\n
UK Biobank’s chief scientist Prof Naomi Allen told the BBC that \u00ab\u00a0ultimately it’s the fault of these rogue researchers\u00a0\u00bb.<\/p>\n
She said these researchers are \u00ab\u00a0giving the global scientific community a bad name\u00a0\u00bb and that she and her colleagues are \u00ab\u00a0extremely cross\u00a0\u00bb about the data leak.<\/p>\n
\u00ab\u00a0We’re very sorry to all of our half a million participants that this has occurred, we appreciate their concerns,\u00a0\u00bb Allen added.<\/p>\n
One Biobank volunteer – Guardian columnist Polly Toynbee – told the BBC she was not worried by the data breach.<\/p>\n
\u00ab\u00a0Biobank volunteers passionately believe that what they’re doing is incredibly valuable, that having this huge bank of information and data helps cure diseases, helps find causes of diseases,\u00a0\u00bb she said.<\/p>\n
\u00ab\u00a0I don’t think many people will be very worried because that information is anonymised.<\/p>\n
\u00ab\u00a0Maybe they could sell details of particular cases, but it won’t be with names or addresses or anything that leads back to particular people. So I don’t think this will rattle all the magnificent volunteers who’ve got in for this.\u00a0\u00bb<\/p>\n
Sir Rory said a number of measures had been imposed following the incident.<\/p>\n
These included a temporarily suspending access to its research platform while a \u00ab\u00a0strict limit\u00a0\u00bb is imposed on the size of files that can be removed from it, and would monitor file exports daily \u00ab\u00a0for any suspicious behaviour\u00a0\u00bb.<\/p>\n
It said there would also be a \u00ab\u00a0comprehensive and forensic board-led investigation of this incident\u00a0\u00bb.<\/p>\n
Reacting to Murray’s statement in the House of Commons, Liberal Democrats technology spokeswoman Victoria Collins branded the situation a \u00ab\u00a0profound betrayal\u00a0\u00bb and urged the government to hold UK Biobank accountable.<\/p>\n
But Murray said the data being placed on the internet had not occurred through a \u00ab\u00a0leak or cyber-attack\u00a0\u00bb.<\/p>\n
\u00ab\u00a0This was a legitimate download by a legitimately accredited organisation,\u00a0\u00bb he said. \u00ab\u00a0That is the problem that’s been identified.\u00a0\u00bb<\/p>\n
Reform UK’s deputy leader branded the breach a \u00ab\u00a0China data theft scandal\u00a0\u00bb.<\/p>\n
Richard Tice said: \u00ab\u00a0The UK taxpayer funded \u00a3200m, approximately, for setting up UK Biobank.<\/p>\n
\u00ab\u00a0Can the minister confirm that our generosity actually will not be abused by those Chinese researchers and that UK Biobank should preclude and exclude them for the future, in order to ensure that this state of theft comes with sanctions?\u00a0\u00bb<\/p>\n
Murray criticised the \u00ab\u00a0tenor\u00a0\u00bb of Tice’s question, saying it did not fit \u00ab\u00a0with the seriousness of this particular issue\u00a0\u00bb, adding that thousands of Chinese researchers have worked with the Biobank \u00ab\u00a0since 2012 safely and securely\u00a0\u00bb.<\/p>\n
The data breach is \u00ab\u00a0not a moment to point fingers, but to take seriously what it tells us about national data infrastructure,\u00a0\u00bb said Prof Elena Simperl, from King’s College London’s department for informatics.<\/p>\n
She said initiatives like the UK Biobank are \u00ab\u00a0absolutely essential\u00a0\u00bb in driving innovation in health and life sciences.<\/p>\n
\u00ab\u00a0Too often, the costs of maintaining infrastructure for flagship data stewardship projects like this are treated as an afterthought,\u00a0\u00bb Simperl added.<\/p>\n
But the data breach could have a \u00ab\u00a0wider consequence\u00a0\u00bb in damaging the confidence of the public in taking part in initiatives such as the Biobank, according to Graeme Stewart, head of public sector at cybersecurity firm Check Point Software.<\/p>\n
\u00ab\u00a0It only takes a relatively small drop in participation to start affecting the quality and reliability of research at scale,\u00a0\u00bb he said.<\/p>\n
Will Richmond-Coggan of Freeths said \u00ab\u00a0deidentified\u00a0\u00bb data can still be treated as personal data, warning that the detailed nature of the information could risk re-identification of the participants.<\/p>\n
A spokesperson for the Information Commissioner’s Office said: \u00ab\u00a0People’s medical data is highly sensitive information, not only do people expect it to be handled carefully and securely, organisations also have a responsibility under the law.<\/p>\n
\u00ab\u00a0UK Biobank has made us aware of an incident and we are making enquiries.\u00a0\u00bb<\/p>\n
Additional reporting by Chris Vallance and James Gallagher.<\/p>\n
Sign up for our Tech Decoded newsletter to follow the world’s top tech stories and trends. Outside the UK? Sign up here.<\/p>\n","protected":false},"excerpt":{"rendered":"
Medical information of 500,000 participants of one of the UK’s landmark scientific programmes, UK Biobank, were offered for sale online in China, the government has confirmed. Technology minister Ian Murray said information of all members of the database was found listed for sale on the website Alibaba. Murray told MPs the charity which runs UK […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-10063","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-uncategorized"},"_links":{"self":[{"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/posts\/10063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/comments?post=10063"}],"version-history":[{"count":0,"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/posts\/10063\/revisions"}],"wp:attachment":[{"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/media?parent=10063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/categories?post=10063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/placedesnations.org\/index.php\/wp-json\/wp\/v2\/tags?post=10063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}