How a credential-stuffing attack exposed 6.9M genetic profiles at 23andMe
A 2023 credential-stuffing attack on 23andMe compromised 6.9 million customer accounts, leaking sensitive genetic and personal data. The breach, now resolved with a $46.75M settlement after bankruptcy, underscores the catastrophic risk of password reuse and the insurability of biometric data platforms.