UK and Canada privacy watchdogs investigating 23andMe data breach

23andMe disclosed a credential-stuffing breach that compromised about 14,000 accounts and allowed attackers to scrape sensitive genetic and personal data for roughly 6.9 million users via an opt-in DNA Relatives feature; the U.K. ICO and Canada’s OPC have launched a joint investigation into the incident and 23andMe's security and notification practices.