23andMe hit with lawsuits after hacker leaks stolen genetics data
BleepingComputer
|
Contributed by: Bill Russell
Summary
23andMe faces multiple lawsuits following data breach impacting millions. Hacker leaked customer data file, containing data of nearly 1M Ashkenazi Jews. CSV file contained user account IDs, names, DOB, DNA profiles, etc. Hacker later sold data, while others spread leaked info in cybercrime communities. 23andMe denies direct security breach; attributes access via credential-stuffing on weak accounts. Attackers accessed larger dataset via optional 'DNA Relatives' feature. Four class action complaints filed in California for failing to protect user data.
