23andMe blames its users for the massive data breach

23andMe experienced a significant October 2023 data breach that exposed personal and genetic information for over 7 million customers (including approximately 5.5 million DNA Relatives profiles and 1.4 million Family Tree profiles). Attackers used credential-stuffing and reused credentials to access accounts; the company has faced criticism and legal action after blaming customers for credential reuse, and later mandated two-factor authentication to strengthen security.