Massive Data Breach: Hackers Compromise 23andMe Profiles of 6.9 Million Customers

Hackers have gained unauthorized access to nearly seven million profiles of 23andMe customers, including users' ancestry reports, zip codes, and birth years. The breach affected approximately 0.1% of the company's user accounts, or around 14,000 accounts, according to a filing with the Securities and Exchange Commission. However, 23andMe now reveals that the hackers were able to access 5.5 million profiles using the DNA Relatives feature, as well as a subset of family tree information on 1.4 million DNA Relatives profiles. The breach was carried out using a technique called credential stuffing, where old usernames and passwords from other websites were reused. 23andMe is notifying affected customers and has implemented additional security measures.