23andMe 2023 Data Breach: Genetic and Ancestry Data of 6.9 Million Users

The 23andMe breach is uniquely concerning because genetic data cannot be changed like a password. Attackers used credential stuffing to access 14,000 accounts then scraped 6.9 million connected DNA Relatives profiles. The leaked data specifically targeted Ashkenazi Jewish and Chinese users.

The breach at 23andMe exposed 6.9 million records through credential stuffing using leaked passwords; dna relatives feature amplified scope. 6.9 million users through DNA Relatives; 14,000 accounts directly compromised The incident highlights the ongoing challenges organizations face in protecting sensitive user data against increasingly sophisticated attack vectors. Security researchers have noted that breaches of this magnitude often result from a combination of technical vulnerabilities and organizational failures in security practices.

Current status: $30 million settlement; company nearing bankruptcy; genetic data custody concerns. Affected users should take immediate steps to protect their accounts, including changing passwords, enabling multi-factor authentication, and monitoring financial accounts for unauthorized activity. Filing a DSAR with 23andMe can help you understand what data was exposed and request its deletion.