deltatux :donor: on Nostr: 23andMe admits that they have been hacked and the attacker made off with the personal ...
23andMe admits that they have been hacked and the attacker made off with the personal data of 6.9 million people. The service confirms that the initial attack vector was through a credential stuffing attack that affected 14,000 accounts but the "DNA relatives" feature was able to amplify the data breach to millions of users.
The company claims that "we still do not have any indication that there has been a data security incident within our systems, or that 23andMe was the source of the account credentials used in these attacks." However, it should be noted that most of the users affected by this breach was due to lack of security controls around 23andMe's opt-in DNA Relatives feature to limit potential impacts of a data breach.
Again, if you wish to partake in these services, one should really look into how much information you're giving up and how these companies are safeguarding sensitive information like this. While you can change a password, good luck trying to change your genetic information & any other information associated with it.
www.theverge.com/2023/12/4/23988050/23andme-hackers-accessed-user-data-confirmed
#infosec #cybersecurity #databreach #23andMe #PII #PHI #Genealogy
The company claims that "we still do not have any indication that there has been a data security incident within our systems, or that 23andMe was the source of the account credentials used in these attacks." However, it should be noted that most of the users affected by this breach was due to lack of security controls around 23andMe's opt-in DNA Relatives feature to limit potential impacts of a data breach.
Again, if you wish to partake in these services, one should really look into how much information you're giving up and how these companies are safeguarding sensitive information like this. While you can change a password, good luck trying to change your genetic information & any other information associated with it.
www.theverge.com/2023/12/4/23988050/23andme-hackers-accessed-user-data-confirmed
#infosec #cybersecurity #databreach #23andMe #PII #PHI #Genealogy