The state of California is suing the genetic testing company 23andMe over its failure to protect millions of users during a data breach. 23andMe allows people to learn about their ancestry, allergies, and potential genetic health risks by sending a swab of their DNA to a lab that sends the information back about 8 weeks later. During a 5-month period, the hackers accessed 7 million users’ profiles (containing their genetic data, lineage, and health information) and in one incident that 23andMe detected/was aware of, a single users’ genetic data had 1 million hacking attempts. The hackers then sold nearly one million users’ information on the dark web.
The one million users offered for sale, the hackers touted, were of Asian American and Pacific Islander (AAPI) and Jewish descent. Let me be clear: they got their allergy data, and sold it to god knows where.
Leave a comment