23andMe User Data Stolen and Offered for Sale After Hackers Access Accounts Through Recycled Passwords
-
Genomics company 23andMe confirmed user data was stolen through a recycled password attack, then hackers accessed more through a feature allowing users to share info.
-
A sample of the stolen data was posted on hacker forums, with profiles claimed to belong to 1 million Ashkenazi Jews.
-
Data profiles were offered for sale between $1-$10 per account. Entries for Mark Zuckerberg and Elon Musk were in the sample.
-
The breach gathered customer profile info, not raw genetic data, through accessing individual accounts.
-
23andMe says it sees no indication of a data breach within its own systems, suggesting login credentials were gathered from other leaked platforms.