Security News

Cybersecurity news aggregator

MEDIUM Attacks SC Media

23andMe agrees to $18 million settlement over data breach

  • What: 23andMe settles over data breach exposing genetic information
  • Impact: 6.9 million users' data was compromised
Read Full Article →

Breach 23andMe agrees to $18 million settlement over data breach July 16, 2026 Share By SC Staff (Adobe Stock) Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general regarding its failure to adequately protect customer genetic data. The settlement follows a significant data breach disclosed in October 2023, based on information published by Bleeping Computer. The breach, which occurred between April and September 2023, was the result of credential-stuffing attacks that compromised the data of 6.9 million customers, including sensitive genetic ancestry information. Some of this data was later offered for sale on the dark web. A multistate investigation found that 23andMe lacked basic safeguards against cyberattacks, such as password blocklisting and multifactor authentication, and failed to address unusual login activity. The settlement imposes new security requirements on the company, including a data security advisory board and risk analysis protocols. Source: Bleeping Computer SC Staff Related Breach Australian regulator declines to find Qantas responsible for 5.67 million customer data exposure SC Staff July 16, 2026 The data exposure occurred through a sophisticated vishing attack where a threat actor, posing as IT support, tricked a contact center agent into visiting a malicious website. Breach Lidl reports data breach affecting online customers in Germany, Belgium, and the Netherlands SC Staff July 13, 2026 The compromised data includes customer salutations, first and last names, phone numbers, email addresses, dates of birth, and customer numbers. Breach Dutch police suspect Dutch hackers in Odido data breach SC Staff July 10, 2026 The breach, which occurred on February 7 and was disclosed on February 12, affected 6.2 million Odido customers. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds

Share this article