Private health records of half a million Britons offered for sale on Chinese website

A picture


The confidential health records of half a million British volunteers have been offered for sale on Chinese website Alibaba, the UK government has confirmed.The “de-identified” data, belonging to participants in the UK Biobank project, was found for sale on three separate listings last week.Ian Murray, the technology minister, told the Commons on Thursday that, after working with the Chinese government and Alibaba, the records had now been removed.It is not believed any sales were made.The latest breach comes after the Guardian revealed last month that sensitive UK Biobank data has been exposed online dozens of times, raising further questions about whether security has been too lax.

“On Monday 20 April, the UK Biobank charity informed the government that it had identified their data had been advertised for sale by several sellers on Alibaba’s e-commerce platforms in China,” Murray said.“Biobank told us that three listings that appear to sell … Biobank participation data had been identified.At least one of these three datasets appeared to contain data from all 500,000 UK Biobank volunteers.”Murray added: “I want to thank the Chinese government for the speed and seriousness with which they worked with us to help remove those listings and the ongoing work to remove any further listings.”UK Biobank has referred itself to the Information Commissioner’s Office.

Chi Onwurah, chair of the Commons science, innovation and technology committee, said the “incredibly serious” breach came as “yet another blow to public trust at a time when we need the benefits of digitalisation to be embraced by all”,“It’s really coming to something if we’re having to rely on the Chinese government to keep our data secure,” she said,The UK Biobank holds the health data of 500,000 volunteers, including genome sequences, brain scans, blood samples and diagnostic records,Scientists at universities and private companies across the world apply for access, and the project has been described as the “jewel in the crown of UK science”,In February, the health secretary, Wes Streeting, issued a legal direction that allowed the coded GP data of all volunteers to be shared with UK Biobank for the first time.

The data being advertised on Alibaba was “de-identified”, meaning it does not include names, addresses or precise dates of birth.But such data can still pose privacy risks.Last month, the Guardian was able to apparently re-identify a single participant in another UK Biobank dataset that had been leaked online, which provided access to extensive hospital diagnosis records for that individual.Murray said the government had ensured Biobank had revoked access to the three research institutions identified as the source of the data.Biobank has also temporarily suspended all access to its data.

Since 2024, scientists have been required to analyse data in Biobank’s cloud-based research platform – a system put in place to improve data security.It is understood that, while researchers are required to sign an agreement not to download raw participant data, there has been no technical block on this.One data privacy expert described this setup as “an extraordinary failure”.Prof Felix Ritchie, an economist at the University of the West of England, said UK Biobank had been “supremely careless” with volunteers’ data.“They have been irresponsible and it’s really sad because UK Biobank is a fantastic resource.

”“I don’t think they’ve got a grip of it,” Ritchie added,“The amazing thing today is that it is for sale on the public internet,I expect that there’s lots more information on the dark web,And once it’s out there, you can’t get rid of it,”Prof Rory Collins, chief executive and principal investigator of UK Biobank, said: “We take the protection of participants’ data extremely seriously and do not tolerate any form of data misuse.

With support from the UK government, Chinese authorities and Alibaba, three listings for de-identified data were swiftly removed before a sale was made.The actions of these individuals are a clear breach of the contract they signed with UK Biobank and they, along with their academic institutions, immediately had their access suspended.“We apologise for the concern this will cause and have already put in place technology, processes and a board-led review to stop this happening again.We have also taken our research platform offline while we add a further upgrade that helps prevent de-identified data being taken out of the platform.We expect this to take three weeks.

Our existing plans to implement an automated ‘airlock’ that checks files and data continues at pace.”The best public interest journalism relies on first-hand accounts from people in the know.If you have something to share on this subject, you can contact us confidentially using the following methods:The Guardian app has a tool to send tips about stories.Messages are end to end encrypted and concealed within the routine activity that every Guardian mobile app performs.This prevents an observer from knowing that you are communicating with us at all, let alone what is being said.

If you don’t already have the Guardian app, download it (iOS/Android) and go to the menu.Select ‘Secure Messaging’.Our guide at theguardian.com/tips lists several ways to contact us securely, and discusses the pros and cons of each.
A picture

I’m welcoming ​in spring ​with ​big ​Mediterranean ​flavours

A combination of the warmer weather, dusting off my sunglasses and the impending release of my new book, MEDesque (out on Thursday!), has got me fully focused on sunshine food and Mediterranean flavours. OK, so I’m not quite in rosé-in-the-garden territory just yet, but it’s close. And I am counting down the days. At home, I am leaning heavily on recipes from the queen of all things Med, Claudia Roden, to get my fix. Big hitters such as her bean stew with chorizo and bacon and chicken traybake with olives and boiled lemon deliver on all fronts, and immediately transport me to my favourite region

A picture

Save blue cheese rind for this unbeatable dressing – recipe | Waste not

On a single crumb of cheese rind there are more than 10 billion microbes: that’s more microbial cells than there are people on Earth. Cheese rind is an intensified expression of the cheese, with a powerful flavour and highly concentrated community of good bacteria, yeast and mould. But it is misunderstood and underrated, and often removed and discarded. Though it can be intense, it’s almost always edible, unless it’s grown new mould or contains synthetic plastic, wax or cloth, which should be removed.Like an apple or slice of bread, the skin, crust or rind add texture, flavour and nutrients to the eating experience

A picture

Head’s up: 12 main-course cauliflower recipes from easy to ambitious

Cauliflower looks like the ghost of broccoli, or a human brain that has been drained of blood. As is the case with many overlooked vegetables, boiling is the absolutely second-worst way to cook it (we do not talk about cauliflower rice), while roasting is best, to coax out its sweet and nutty flavours. A whole head is very good and affordable in Australia at the moment and can easily feed a whole family.Marrying florets with warm spices and fragrant baked rice, Meera Sodha’s vegan recipe is finished with a drizzle of fresh lemon juice to keep the flavour fresh. Pick a purple cauliflower and the acid at the end will flush the florets bright pink

A picture

How do I get texture and that umami hit without meat? | Kitchen aide

I’ve recently given up eating pork, but I’m struggling to compensate for its umami. How can I recreate the taste and texture in, say, carbonara or my beloved chorizo dishes?James, by emailFor Joe Woodhouse, author of Weeknight Vegetarian, there’s just something about white beans: “Whether cooked from dried, then dropping chopped onion, garlic, sage and thyme into the broth, or just dumping a jar or tin into a pan with fried garlic and sage, the smell that fills the kitchen is like that of sausagemeat,” he says. “It tastes a bit like it, too – or at least the memory of it, bearing in mind I haven’t eaten the stuff for 30 years.”The quest for that umami savouriness could start with soy sauce, Woodhouse says (“or Slow Sauce’s oat shoyu”), while chef Mike Davies’ first port of call would be Totole’s Chinese mushroom seasoning powder: “It’s super-effective in replacing the richness and fattiness that comes from cooking with any meat, and especially pork,” says the chef-director of the Camberwell Arms, south London. “Honestly, it’s such a cheat-code ingredient

A picture

Georgina Hayden’s quick and easy recipe for smoky prawn, new potato and spinach stew | Quick and easy

This Spanish-style stew is a superb midweek dinner – it’s effortless but looks specialThis Spanish-inspired stew is a great weeknight dinner, particularly if you are having a few friends over, because it feels a bit special while actually being effortless and easy. If you want to take that effortlessness to the next level, make the potato base in advance, then finish off with the spinach and prawns just before serving (I like to do as little cooking as possible in front of guests, leaving me free to chat and pour drinks). Serve with a peppery, lemon-dressed salad on the side and hunks of crusty bread to mop up the juices.Prep 5 min Cook 35 min Serves 44 tbsp olive oil, plus extra for drizzling 5 garlic cloves, peeled, 4 finely sliced, 1 left whole½ tsp sweet smoked paprika ¼ tsp mild chilli powder 1 tbsp tomato puree 250g ripe tomatoes, choppedSea salt and black pepper 300ml fish stock 600g new potatoes, halved (or quartered if very large)1 lemon 150g baby spinach 350g peeled king prawns, deveined, if you like6 tbsp mayonnaise ½ bunch flat-leaf parsley, finely choppedPut a large, deep, ovenproof frying pan on a medium-low heat and drizzle in the olive oil. Add the sliced garlic, fry for a minute, then stir in the paprika, chilli powder and tomato puree

A picture

How to make creme caramel – recipe | Felicity Cloake's Masterclass

I don’t know why this classic French dessert isn’t more popular online, given how pleasant it is to watch a softly set custard jiggling seductively on screen, or to admire the way the light bounces off its glossy, caramel top. Worse still, it’s also increasingly hard to find on menus, too. Well, you know what they say: if you want something done well, do it yourself.Prep 15 min Cook 50 minCool 4 hr+ Makes 6For the custardSoft butter, or neutral oil (eg, sunflower, vegetable or groundnut), for greasing500ml whole milk (see step 2)1 vanilla pod, or 1 tsp vanilla extract 2 whole eggs 100g caster sugar 4 egg yolksFor the caramel60g caster sugar 40g soft dark brown sugar (see step 3)1 pinch saltLightly grease six dariole moulds, small pudding bowls or smooth-sided ramekins.Arrange these on a baking tray or shallow tin, preferably one just large enough to hold them all without too much room around the edge, and put it within easy reach of the hob