Spain Fines 23andMe €2.4 Million Over Security Failures Behind 6.9 Million-User Breach
ID: 05fccd28-ce92-58dc-a46b-170e186d82c4
STIX ID: report--05fccd28-ce92-58dc-a46b-170e186d82c4
Feed Name: cybersecurityNews.com
Threat Score
Spain fined 23andMe €2.4M after a 2023 credential-stuffing attack using reused credentials allowed attackers to access ~14,000 accounts and, via social/family-matching features, expand impact to millions of profiles and expose sensitive genetic and personal data for roughly 2,600 people in Spain; regulators found missing universal MFA, weak password protections, poor download controls, inadequate detection/response, and delayed breach notification.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.