Wednesday, May 8, 2024

23andMe Scraping Incident Leaked Data On 1.3 Million Users


Jonathan Greig writes by means of The Record: Genetic trying out massive 23andMe showed {that a} information scraping incident resulted in hackers gaining access to sensitive user information and promoting it at the darkish internet. The information of just about 7 million 23andMe customers was once offered on the market on a cybercriminal discussion board this week. The information incorporated beginning estimation, phenotype, well being information, pictures, identity information and extra. 23andMe processes saliva samples submitted via shoppers to decide their ancestry.

When requested concerning the post, the corporate first of all denied that the information was once professional, calling it a “misleading claim” in a observation to Recorded Future News. The corporate later stated it was once conscious that sure 23andMe buyer profile information was once compiled thru unauthorized get entry to to person accounts that had been signed up for the DNA Relative characteristic — which permits customers to decide in for the corporate to turn them possible fits for kin. […] When pressed on how compromising a handful of consumer accounts would give somebody get entry to to hundreds of thousands of customers, the spokesperson stated the corporate does now not consider the risk actor had get entry to to all the accounts however reasonably received unauthorized access to a way smaller choice of 23andMe accounts and scraped information from their DNA Relative fits.

- Advertisement -

A researcher approached Recorded Future News after analyzing the leaked database and located that a lot of it regarded actual. […] The researcher downloaded two information from the BreachForums post and located that one had information on 1 million 23andMe customers of Ashkenazi heritage. The different document incorporated information on greater than 300,000 customers of Chinese heritage. The information incorporated profile and account ID numbers, names, gender, delivery 12 months, maternal and paternal genetic markers, ancestral heritage effects, and information on whether or not or now not each and every consumer has opted into 23andme’s well being information. The researcher added that he came upon every other factor the place somebody may just input a 23andme profile ID, like those incorporated within the leaked information set, into their URL and notice somebody’s profile. The information to be had thru this most effective comprises profile pictures, names, delivery years and site however does now not come with take a look at effects.

[/gpt3]

More articles

- Advertisement -
- Advertisement -

Latest article