23andMe: It’s YOUR Fault We Lost Your Data

23andMe disclosed that attackers accessed ~14,000 accounts via credential stuffing and leveraged the service's DNA Relatives feature to expose genetic and PII for approximately 6.9 million users; the company has faced lawsuits and controversy after its legal filings blamed victims for reusing passwords, and it has since moved to enable two-factor authentication by default.