A Guardian investigation has revealed multiple instances of confidential health data exposure online, questioning the UK BioBank project's patient record security.