At least a million data points from 23andMe accounts appear to have been exposed on BreachForums. While the scale of the campaign is unknown, 23andMe says it’s working to verify the data.

  • saigot ( saigot@lemmy.ca ) 
    link
    fedilink
    arrow-up
    24
    ·
    3 years ago

    The company said its systems were not breached and that attackers gathered the data by guessing the login credentials of a group of users and then scraping more people’s information from a feature known as DNA Relatives.

    The information does not appear to include actual, raw genetic data.

    • Saik0 ( Saik0Shinigami@lemmy.saik0.com ) 
      link
      fedilink
      English
      arrow-up
      30
      ·
      3 years ago

      This doesn’t absolve them of anything. If you see thousands of accounts being individually logged in from the same block of IP addresses, and those users have never logged in from there before. That should raise red flags. No, Fred from California shouldn’t be logging in from a vpn based out of Ireland right after Anne from NY logged in from that same VPN from Ireland.

      Users are dumb. This is why there’s tools to track odd behavior and clamp down on it.