UK BIOBANK DATA REPEATEDLY LEAKED ON GITHUB
DEV DESK■ 1 MIN READ
FRI, APR 24, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Researchers have tracked 110 DMCA takedown notices targeting 197 code repositories containing UK Biobank health data. The exposures reveal ongoing governance challenges for the major health research initiative.
A privacy researcher monitoring Digital Millennium Copyright Act notices found that sensitive UK Biobank data has been repeatedly uploaded to GitHub by developers across 170 accounts worldwide.
The instances represent the latest in a series of data handling issues for UK Biobank, a repository of health records and genetic information from 500,000 British participants used for medical research.
The leaked repositories contained portions of the biobank's dataset, which researchers access for studies but are bound by data usage agreements. The repeated uploads suggest either accidental commits or misunderstandings about data sharing restrictions.
GitHub has been removing the repositories following takedown notices, but the pattern indicates a systemic problem. Researchers and the institution have published commentary in the British Medical Journal highlighting the governance gaps.
The exposures underscore broader challenges in managing sensitive health data as research becomes increasingly collaborative and code-sharing platforms grow more prevalent in academic work.
■ SOURCES
► Hacker News■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
16H AGO— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
16H AGO— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
16H AGO— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
16H AGO— Security Desk