In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • mp04610@lemm.eeEnglish
    13·
    9 months ago

    From these 14,000 initial victims, however, the hackers were able to then access the personal data of the other 6.9 million million victims because they had opted-in to 23andMe’s DNA Relatives feature.

    How exactly are these 6.9M users at fault? They opted in to a feature of the platform that had nothing to do with their passwords.

    On top of that, the company should have enforced strong passwords and forced 2FA for all accounts. What they’re doing is victim blaming.