Canada & UK Partner in Joint 23andMe Data Breach Investigation

UK and Canadian authorities have launched a joint investigation into an October credential-stuffing breach at 23andMe that affected roughly 7 million users and led to the release of about 4 million records. Regulators will examine what sensitive genetic and health information was exposed, whether 23andMe had adequate safeguards, and if breach notifications were appropriate; the company has attributed the incident to victims reusing previously exposed passwords.