Massive Data Breach at 23andMe Exposes Personal Information of 6.9 Million Users

Hackers have gained unauthorized access to nearly seven million profiles of 23andMe customers, including users' ancestry reports, zip codes, and birth years. The breach affected about 0.1% of the company's user accounts, or approximately 14,000 accounts. The hackers were able to access 5.5 million profiles using the DNA Relatives feature and obtained a subset of family tree information from 1.4 million DNA Relatives profiles. The breach was a result of credential stuffing, where hackers reused old usernames and passwords from other websites. 23andMe is notifying affected customers and has implemented additional security measures, such as password resets and two-step verification.