ClosedHighNo fix needed
23andMe: credential stuffing exposes 6.9M users' ancestry data
23andMe
Attackers used reused passwords to log into about 14,000 23andMe accounts, then scraped the DNA Relatives profiles those accounts could see. Data on about 6.9 million people was exposed and sold on hacking forums.
Why this severity: Data breach via credential stuffing
- Started
- Oct 6, 2023
- Closed
- Dec 4, 2023
Affected
Not published yet
Fixed in
No fixed release yet
Timeline2
Advisories1
News & write-ups1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
