23andMe confirms hackers stole ancestry data on 6.9 million users | TechCrunch

( December 4, 2023; TechCrunch )

Description: "Genetic testing company 23andMe revealed that its data breach was much worse than previously reported, hitting about half of its total customers."

Apparently, the accounts were compromised because their owners reused passwords that had already leaked on other sites. This is why security experts say to use a pasword manager and different passwords at every site.

Every year that goes by, I like the idea of DNA web sites less and less. I get the allure of genealogy. It's fascinating. But once your information leaks, it's out there forever, and it's impossible to imagine how it might be misused in 5 or 10 or 20 years (against the person whose DNA leaked or even against someone else in their family). OTOH, I guess it's getting easier and easier to just surreptitiously collect people's DNA in public places, so maybe a moot point.

Additional references can be found here:

• blog post from 23AndMe
• Information in the "Relatives Profile" - also from 23AndMe
• arsTechnica: Hackers stole ancestry data of 6.9 million users, 23andMe finally confirmed
• Wired: 23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews

hackers accessed the personal information of about 5.5 million people who opted-in to 23andMe’s DNA Relatives feature, which allows customers to automatically share some of their data with others. The stolen data included the person’s name, birth year, relationship labels, the percentage of DNA shared with relatives, ancestry reports and self-reported location...

...another group of about 1.4 million people who opted-in to DNA Relatives also “had their Family Tree profile information accessed,” which includes display names, relationship labels, birth year, self-reported location and whether the user decided to share their information