October 13, 2023 at 04:09PM
Genetic testing provider 23andMe is facing multiple class action lawsuits in the U.S. after a data breach that affected millions of customers. The breach involved a leaked CSV file containing the data of around 1 million Ashkenazi Jews who used the service. 23andMe claims that the breach was a result of hackers gaining unauthorized access to weakly secured accounts through credential-stuffing attacks, rather than a direct security breach of their systems. However, the lawsuits argue that 23andMe failed to adequately protect customer data and implement sufficient security measures. Plaintiffs are seeking various financial reliefs, including restitution, monitoring, damages, and attorney’s fees.
Meeting Notes Summary:
– Genetic testing provider 23andMe is facing multiple class action lawsuits in the U.S. following a data breach.
– A threat actor leaked 23andMe customer data on hacking forums, impacting nearly 1 million Ashkenazi Jews who used the service.
– The leaked data included account IDs, full names, sex, date of birth, DNA profiles, location, and region details.
– The original hacker retracted the post and started selling stolen data profiles, while other threat actors continued to share the leak.
– 23andMe claims that the hackers accessed weakly secured accounts through credential-stuffing attacks, denying a direct security breach.
– 23andMe is working with third-party experts and law enforcement to investigate the breach.
– Multiple lawsuits have been filed against 23andMe for failing to protect customer data and implement adequate security measures.
– The lawsuits seek various financial reliefs, including restitution, damages, lifetime credit monitoring, and attorney’s fees.