The UK ICO has fined 23andMe £2.31 million for serious security failures that resulted in a significant data breach affecting millions of users’ sensitive information, including health and family data. The breach was caused by credential stuffing attacks, with some stolen data being published on hacking forums and social platforms. #23andMe #DataBreach #CredentialStuffing #UKICO
Keypoints
- 23andMe was fined for security lapses that led to a major data breach in 2023.
- The breach exposed sensitive genetic, health, and personal information of millions of users.
- Stolen data was disseminated on hacking forums including BreachForums.
- After the breach, 23andMe implemented security measures like two-factor authentication.
- The incident triggered multiple lawsuits and a $30 million settlement worldwide.