In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • JohnEdwa@sopuli.xyzEnglish
    2·
    9 months ago

    You didn’t read it either. They gained access to shared information between the accounts because both accounts had enabled “share my info with my relatives” option.

    Logging into someones Facebook and seeing their friends and all the stuff they posted as “friends only” and their private DM discussions isn’t a hack or a vulnerability, it’s how the website works.

    • Hegar@kbin.social
      02·
      9 months ago

      Laughing a feature that lets an inevitable attack access 500 other people’s info for every comprimised account is a glaring security failure.

      Accounting for foreseeable risks to users’ data is the company’s responsibility and they launched a feature that made a massive breach inevitable. It’s not the users’ fault for opting in to a feature that obviously should never have been launched.