The chief executive of the UK Biobank, one of the world’s largest biomedical databases, recently wrote to over 500,000 participants telling them that some of their data had been made available for sale online through a Chinese website. This wasn’t a data breach or hack, but rather researchers who had legitimately accessed the data trying to sell it.
Although it was stated that participants could not be identified, and there was no sign that the data had actually been bought by anyone, the fact that someone could even try to sell parts of the dataset is extremely concerning. Unfortunately, the failure was unlikely to be in the protection set up by the biobank itself, but rather in the honesty of the researchers accessing the data.
