What Could Have Stopped the 23andMe Hack?

In October 2023, 23andMe announced a data breach involving the theft of personal, genetic, and ethnic data of millions of users, subsequently sold on the dark web. The hackers employed "credential stuffing," using stolen username/password combinations from other sites, exploiting users' common practice of password reuse. This method exposed even accounts with strong passwords, as 23andMe's "DNA Relatives" feature interconnected user data. The incident highlights the inadequacy of relying solely on users for password security, emphasizing the need for stronger …

23andme access control accounts breach credential credential stuffing cybersecurity dark dark web data data breach data-breach-prevention exploiting exposed genetic hack hackernoon-top-story hackers october password password reuse personal practice reuse stolen theft username web