https://pwn.watch/t/23andme Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Mon, 04 Dec 2023 00:00:00 GMT https://pwn.watch/i/23andme-credential-stuffing-data-breach-2023 https://pwn.watch/i/23andme-credential-stuffing-data-breach-2023 Mon, 04 Dec 2023 00:00:00 GMT high <p>Attackers used reused passwords to log into about 14,000 23andMe accounts, then scraped the DNA Relatives profiles those accounts could see. Data on about 6.9 million people was exposed and sold on hacking forums.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2023-12-04: 23andMe confirms about 6.9 million people affected (<a href="https://techcrunch.com/2023/12/04/23andme-confirms-hackers-stole-ancestry-data-on-6-9-million-users/">source</a>)</li><li>2023-10-06: 23andMe confirms user profile data was scraped and offered on hacking forums (<a href="https://blog.23andme.com/articles/addressing-data-security-concerns">source</a>)</li></ul>