Feed›Data Breach›23andMe agrees to a $18 million settlement over 2023 data br...
Data BreachCyber Insider
8.5 — CRITICAL

23andMe agrees to a $18 million settlement over 2023 data breach

📅 16 July 2026 at 15:29 UTC📰 Cyber InsiderView original source ↗
23andMe agrees to a $18 million settlement over 2023 data breach

A bipartisan coalition of 43 attorneys general has secured an $18 million settlement with genetic testing company 23andMe over its failure to adequately protect customer data before the company's 2023 breach. The agreement also requires new cybersecurity and governance measures for the organization now responsible for managing the genetic information of millions of users. New … The post 23andMe agrees to a $18 million settlement over 2023 data breach appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

A bipartisan coalition secured an $18 million settlement with 23andMe over its failure to adequately protect customer data, resulting in a 2023 breach affecting approximately 6.9 million people. The company's inadequate security controls allowed attackers to exploit stolen credentials and access sensitive customer information.

⚙️Technical Details
Affected Systems
23andMe's genetic database
Attack Vectors
credential-stuffing attack using stolen usernames and passwordsexploitation of the DNA Relatives feature
💥Impact Assessment
Severity: high
Who Is at Risk
approximately 6.9 million people, including 305,245 New York residents
🛡️Recommended Actions
1enable multifactor authentication for accounts
2use unique passwords and monitor accounts for suspicious activity
3consider deleting genetic data if no longer wanted

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed