Guess the company: Takes your DNA, blames you when criminals steal it, can’t spot a cyberattack for 5 months
ID: f381cfb7-000e-54af-b4bc-d5b7c85b6f3c
STIX ID: report--f381cfb7-000e-54af-b4bc-d5b7c85b6f3c
Feed Name: The Register (Security)
Threat Score
23andMe disclosed that attackers performed credential-stuffing logins between April and September 2023, compromising roughly 14,000 accounts with the DNA Relatives feature enabled and potentially exposing the genetic-relationship data of about 6.9 million people; the activity was detected only in October after a Reddit post, 2FA was mandated afterward, and the company has blamed user credential reuse for the breach.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.