UK ICO Fines 23andMe £2.3m for Data Protection Failings
ID: 341b302f-f4d5-5283-b670-4546985a0e29
STIX ID: report--341b302f-f4d5-5283-b670-4546985a0e29
Feed Name: Infosecurity Magazine (News)
Threat Score
**Executive Summary:** 23andMe suffered a credential-stuffing campaign April–September 2023 that allowed attackers to access and scrape sensitive profile and genetic-related data from approximately seven million users worldwide; the UK Information Commissioner found failures in authentication, monitoring and data access controls and fined the company £2.3m.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.