Some 6.9 million 23andMe prospects had their information compromised after an nameless hacker accessed user profiles and posted them on the market on the web earlier this 12 months, the corporate mentioned on Monday. The compromised information included consumer ancestry information in addition to, for some customers, health-related information primarily based on their genetic profiles.
The hacker appeared to make use of what’s often called credential stuffing to entry buyer accounts, logging into particular person 23andMe accounts through the use of passwords that had been recycled and used for different web sites that have been beforehand hacked. The corporate mentioned there was no proof of a breach inside its personal methods.
For the reason that hack, the corporate announced that it’ll require two-factor authentication so as to shield in opposition to credential-stuffing assaults on the positioning.
