Data BreachBleeping Computer
9.5 — CRITICAL
23andMe to pay $18 million in new genetics data breach settlement
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general that it failed to protect customers' genetic data. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A massive genetic data breach occurred at 23andMe, resulting in the theft of 6.9 million customers' genetic data, which was later offered for sale on the dark web. The company agreed to pay $18 million to settle claims from a coalition of attorneys general.
⚙️Technical Details
Affected Systems
23andMe's customer database
Attack Vectors
credential-stuffing attacksvulnerabilities in login functionality
💥Impact Assessment
Severity: critical
Who Is at Risk
6.9 million customers of 23andMe
🛡️Recommended Actions
1Implement multifactor authentication and password blocklisting to prevent credential-stuffing attacks.
2Regularly update and patch login functionality to address known vulnerabilities.
3Monitor customer data for unusual activity and implement breach-detection monitoring.
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.