23andMe tells victims it’s their fault that their data was breached

23andMe disclosed a large-scale data breach in which attackers initially credential-stuffed roughly 14,000 accounts and then accessed or scraped ancestry and genetic data for about 6.9 million users via the platform’s DNA Relatives feature; the company reset passwords, made MFA mandatory, and faces multiple class-action lawsuits while contesting liability and blaming recycled passwords.