California Attorney General Rob Bonta sued 23andMe, now Chrome Holding Co., over its failure to protect sensitive genetic and personal data in a 2023 breach that exposed information from nearly 7 million customers. The complaint says the company failed to stop credential-stuffing attacks, missed signs of intrusion, and made misleading public statements about the incident. #23andMe #ChromeHoldingCo #RobBonta #CaliforniaAttorneyGeneral
Keypoints
- California filed a lawsuit against 23andMe over weak data protection.
- A 2023 breach exposed sensitive data from about 6.9 million customers.
- The attackers used credential-stuffing and targeted DNA Relatives accounts.
- The lawsuit says 23andMe missed intrusion signs and failed to catch a coding flaw.
- The AG alleges violations of multiple California privacy and consumer laws.