Computers & internet

23andMe: Hackers Accessed Data of 6.9M

DEC 5 2023·Updated DEC 6 2023

Story

Image credit: Smith Collection/Gado/Archive Photos [via Getty Images]

The Facts

Genetic testing company 23andMe concluded an investigation into an October hack on Tuesday, confirming that cybercriminals gained access to the data of 6.9M people.
CTVNews
The company said hackers accessed the accounts of 0.1% of customers, or around 14K. But by accessing that data, the hackers were able to gain access to "a significant number of files containing profile information about other users’ ancestry."
TechCrunch
The company confirmed hackers accessed 5.5M users who opted into 23andMe's DNA Relatives feature, which allows customers to automatically share their information with those with common DNA, while 1.4M other users had their family tree information accessed.
USA Today
The stolen data included usernames, birth years, locations, pictures, addresses, and the percentage of DNA shared with relatives. There’s no evidence that any of the data has been purchased or used by criminals.
BBC News
Hackers gained access by using the email and password details that were the same on other unrelated websites previously hacked. CEO of risk management platform CybSafe, Oz Alashe, said the breach "emphasizes the importance of improving cyber-security behaviors in the general population" and the importance of strong passwords and two-factor authentication.
BBC News
The company doesn't expect a major financial fallout from the incident but expects to incur $1M to $2M in costs related to the breach.
Time

Sources Split

LEFT

CENTER

RIGHT

ESTAB
CRIT

CENTER

PRO
ESTAB

The Spin

Narrative A

While it’s unfortunate that this user data was accessed, the company isn’t totally at fault. Users must learn to create stronger, unique passwords for all sites they use. And 23andMe will now require two-factor authentication to prevent future illegal access by bad actors.

TechCrunch

Narrative B

Nothing is 100% safe on the internet, even when a company like 23andMe takes the necessary steps to prevent breaches. Cybercriminals are able to access data from other hacks and then use it to access other sites. That’s why it’s important to consider whether it’s worth trusting a private company with something as valuable as your DNA.