:

UK BIOBANK DATA REPEATEDLY LEAKED ON GITHUB

DEV DESK1 MIN READ
FRI, APR 24, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

Researchers have tracked 110 DMCA takedown notices targeting 197 code repositories containing UK Biobank health data. The exposures reveal ongoing governance challenges for the major health research initiative.

A privacy researcher monitoring Digital Millennium Copyright Act notices found that sensitive UK Biobank data has been repeatedly uploaded to GitHub by developers across 170 accounts worldwide. The instances represent the latest in a series of data handling issues for UK Biobank, a repository of health records and genetic information from 500,000 British participants used for medical research. The leaked repositories contained portions of the biobank's dataset, which researchers access for studies but are bound by data usage agreements. The repeated uploads suggest either accidental commits or misunderstandings about data sharing restrictions. GitHub has been removing the repositories following takedown notices, but the pattern indicates a systemic problem. Researchers and the institution have published commentary in the British Medical Journal highlighting the governance gaps. The exposures underscore broader challenges in managing sensitive health data as research becomes increasingly collaborative and code-sharing platforms grow more prevalent in academic work.

■ SOURCES

Hacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Password resets, commonly used to regain access to accounts, are a prime vulnerability for attackers. Research from Specops Software reveals that social engineering targeting helpdesks can turn legitimate reset requests into complete account takeovers.

7H AGOIndustry Desk

Zscaler's CEO Jay Chaudhry reports unprecedented demand for the company's services as enterprises grapple with escalating cybersecurity threats. The remarks come as large organizations face mounting challenges protecting themselves against emerging AI-related vulnerabilities.

8H AGOIndustry Desk

Sean Plankey has requested to withdraw his nomination to lead the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The withdrawal comes after the agency endured a period of unstable temporary leadership.

8H AGOSecurity Desk

Context AI, an AI agent training startup, disclosed a security incident last week. TechCrunch confirmed that Delve, a compliance company, had certified Context AI's security.

8H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.