CyberSecurity updates
Updated: 2024-10-15 16:03:19 Pacfic

Flag This


thecyberexpress.com

23andMe Settles Data Breach Lawsuit for $30 Million Following a Credential Stuffing Attack - 5d


Read more: thecyberexpress.com

23andMe, a genetic testing and ancestry service, experienced a data breach between April and August 2023, resulting in the exposure of personal data of 6.9 million customers. The breach involved credential stuffing, allowing attackers to access 5.5 million DNA Relatives profiles and 1.4 million Family Tree user profiles. This resulted in a class-action lawsuit, which 23andMe settled for $30 million, including providing affected individuals with credit monitoring and other security services.