23andMe Data Breach: What You Need to Know
A detailed look into the recent 23andMe data breach affecting 6.9 million users
- Overview of the 23andMe data breach
- Impacted user information
- Security implications and recommendations
- Expert insights on cybersecurity measures
Hackers have managed to compromise personal data from approximately 6.9 million users of the genetic testing company 23andMe by exploiting old passwords. The breach revealed sensitive details including family trees, birth years, and geographic locations, although DNA records were not part of the stolen information.
While 23andMe itself was not directly hacked, cybercriminals accessed about 14,000 individual accounts utilizing email and password data obtained from previous breaches. By infiltrating these accounts, hackers were able to access profile information related to users' ancestry, impacting a significant portion of the company's customer base.
The stolen data encompassed various personal identifiers such as names, family connections, birth years, locations, photos, addresses, and the percentage of shared DNA with relatives. Furthermore, hackers were able to retrieve family tree profile details of approximately 1.4 million customers engaging in the DNA relatives feature, including display names and relationship labels.
Despite concerns raised by the discovery of a dataset targeting individuals with Jewish ancestry, there is currently no evidence indicating that any of the advertised information has been sold or misused. Data security experts emphasize the necessity of enhancing cybersecurity practices among individuals to mitigate risks associated with data breaches.
Following the breach, 23andMe is taking requisite steps by notifying affected customers, mandating password changes, and enhancing overall account security measures to fortify their platform against potential threats.
Hackers claim not to have BBC, Boots and BA data
How safe is my data after a hack or leak?
British Library's hacked customer data on dark web
Council published residents' details on website
Thousands of rugby fans' data leaked in breach
PSNI could be fined £750k over data breach
Expert Insights:
Oz Alashe, CEO of CybSafe, stresses the significance of enhancing cybersecurity practices among the general population post the 23andMe data breach. "Weak passwords and lack of two-factor authentication in user accounts expose sensitive data to significant risks," Alashe warns.
Related Business News:
- McDonald's loses EU trademark for chicken Big Macs - The European Court of Justice's ruling allows other chains to offer "Big Macs" with poultry.
- GameStop shares surge - Share prices rise after an account linked to "Roaring Kitty" discloses a substantial stake.
- WeWork's bankruptcy resolution - WeWork is anticipated to emerge from bankruptcy in a leaner state with reduced debt.
- Consumer caution urged over new supermarket promotions - Loyalty schemes may tempt shoppers to overspend, warns consumer advocacy groups.
- Ousted WeWork CEO halts buyback bid - Adam Neumann withdraws attempt to repurchase WeWork following its bankruptcy declaration.