23andMe Data Breach Affects Nearly Half of All Users

Hackers Accessed Personal and Genetic Information of Approximately 6.9 Million Customers

23andMe, a genetic testing company, has confirmed that hackers accessed the personal data of approximately 6.9 million users, nearly half of its total customer base.
The breach was initially thought to have affected only 0.1% of accounts, but the company's DNA Relatives feature allowed the hackers to access a much larger number of profiles.
The compromised data includes users’ names, birth years, relationship labels, the percentage of DNA shared with relatives, ancestry reports, and self-reported locations.
The breach was carried out using a credential-stuffing attack, where hackers used login credentials from other compromised websites to gain unauthorized access to 23andMe accounts.
23andMe has since required all users to reset their passwords and implement two-step verification, and is in the process of notifying all affected customers.