23andMe exposed genetic information of millions, lawsuit says

California has sued Chrome Holding Co. (the remnant of 23andMe) over alleged security failures in a 2023 breach where credential-stuffing compromised ~14,000 accounts and a coding error in the DNA Relatives feature allowed attackers to scrape genetic data for millions of users; the stolen data was later offered on the dark web, prompting fines, settlements, bankruptcy proceedings, and regulatory/legal challenges.