Why this company is blaming its customers for data breach
Why this company is blaming its customers for data breach
Genetic testing company 23andMe is facing 30 lawsuits from victims of the cyber attack it faced last year, involving the theft of genetic and ancestry data from 6.9 million users. The company allegedly sent a letter blaming the victims for the data theft and disclaiming responsibility. The breach initially reported in October 2020 impacted around 6.9 million individuals due to an internal data-sharing feature. Hackers used a technique called credential stuffing to breach user accounts and access personal data of additional customers who opted-in to 23andMe's DNA Relatives feature. Lawyers representing the victims accused 23andMe of neglecting responsibility and downplaying the severity of the situation. 23andMe reset passwords and made multi-factor authentication mandatory after the breach, and changed their terms of service to discourage legal action. In a court case, 23andMe argued that the stolen data cannot cause financial harm as it did not include sensitive information like social security or financial details.
Genetic testing company 23andMe is facing 30 lawsuits from victims of the cyber attack it faced last year, involving the theft of genetic and ancestry data from 6.9 million users. The company allegedly sent a letter blaming the victims for the data theft and disclaiming responsibility. The breach initially reported in October 2020 impacted around 6.9 million individuals due to an internal data-sharing feature. Hackers used a technique called credential stuffing to breach user accounts and access personal data of additional customers who opted-in to 23andMe's DNA Relatives feature. Lawyers representing the victims accused 23andMe of neglecting responsibility and downplaying the severity of the situation. 23andMe reset passwords and made multi-factor authentication mandatory after the breach, and changed their terms of service to discourage legal action. In a court case, 23andMe argued that the stolen data cannot cause financial harm as it did not include sensitive information like social security or financial details.
We use cookies to improve your experience on our site and to show you relevant advertising. To find out more, read our updated privacy policy and cookie policy
Through RSS Feeds 
Genetic testing company 23andMe is facing 30 lawsuits from victims of the cyber attack it faced last year, involving the theft of genetic and ancestry data from 6.9 million users. The company allegedly sent a letter blaming the victims for the data theft and disclaiming responsibility. The breach initially reported in October 2020 impacted around 6.9 million individuals due to an internal data-sharing feature. Hackers used a technique called credential stuffing to breach user accounts and access personal data of additional customers who opted-in to 23andMe's DNA Relatives feature. Lawyers representing the victims accused 23andMe of neglecting responsibility and downplaying the severity of the situation. 23andMe reset passwords and made multi-factor authentication mandatory after the breach, and changed their terms of service to discourage legal action. In a court case, 23andMe argued that the stolen data cannot cause financial harm as it did not include sensitive information like social security or financial details. 
