23andMe confirms last year's massive data breach went unnoticed for five months, hackers stole raw genotype data

In its mandatory breach notification letter filed to California's attorney general, 23andMe confirmed that hackers started breaching customer accounts on April 29, 2023, continuing to do so until September 27. The cybercriminals spent five months brute-forcing customer accounts using passwords and email addresses leaked in other breaches (credential stuffing), all...

Read Entire Article

23andme accounts addresses april attorney attorney general breach breach notification brute california customer cybercriminals data data breach email general hackers letter notification passwords september