Genetic testing company 23andMe is investigating a data breach that exposed customer information, including profile photos, birth years, and ancestry details of millions of its users.
The compromised data was obtained through unauthorized access to individual 23andMe accounts, the company said in a statement reported by Ars Technica. Preliminary results suggest the login credentials used to access the accounts “may have been gathered by a threat actor from data leaked during incidents involving other online platforms where users have recycled login credentials,” 23andMe said.
The technique, known as credential stuffing, involves using usernames and passwords exposed in previous breaches to break into other online accounts.
Following a claim that someone had gained access to and is selling certain 23andMe customer data, we conducted an investigation. We have not identified any unauthorized access to our systems. We will continue to monitor the situation.
— 23andMeSupport (@23andMeSupport) October 4, 2023
23andMe said in a blog post that it has no evidence of an actual breach of its systems. “We do not have any indication at thi
Go to Source to See Full Article
Author: Decrypt AI, Edited by Ryan Ozawa
Tip BTC Newswire with Cryptocurrency