23andMe credential-stuffing breach
Attackers used credentials reused from prior breaches to access 23andMe accounts, then leveraged the 'DNA Relatives' feature to scrape ancestry and genetic profile data on 6.9 million users from compromised relatives' connections.
- Victim
- 23andMe Holding Co.
- Loss
- $50.0M
- Records
- 6.9M