An anonymous hacker has recently claimed to have access to "millions" of genetic profiles taken from compromised 23andMe customer accounts. These profiles reportedly include personal details such as email addresses, photos, gender, date of birth, and DNA ancestry. The hacker is offering to sell this data, suggesting that it could be exploited to target individuals based on their ethnicity.
23andMe Holding Co., a company that offers genetics test kits and provides ancestry and health reports based on saliva analysis, confirmed that genuine customer data was indeed being sold on a hacker forum. However, the company stated that they found no evidence of a breach in their information systems. Instead, it appears that the hacker gained access to individual customer accounts by utilizing credentials obtained from other hacked accounts found in various online databases.
Furthermore, it seems that the hacker went a step further by creating profiles of additional individuals. They accomplished this by replicating the names of the relatives of 23andMe customers who had already been connected through the company's "DNA Relatives" tool. This feature allows users to connect with potential relatives who share similar DNA and exchange genetic profiles.
In response to the situation, 23andMe released a statement confirming that they are taking the matter seriously and will continue their investigation to validate the initial findings. The company, known for prioritizing user privacy and data protection, assures its customers that they are committed to resolving the issue promptly.
The breach became apparent on October 2nd when an anonymous seller posted details of a "one million Ashkenazi database" on a forum designated for the sale of hacked data. This term refers to individuals of central and eastern European Jewish heritage.
The incident highlights the continuously evolving and increasing threat of hackers targeting sensitive personal information. It serves as a reminder for individuals and companies alike to remain vigilant and employ strong security measures to safeguard their data. 23andMe and other similar companies must constantly evaluate and enhance their security protocols to prevent unauthorized access and potential misuse of customer information.
As the investigation into the hacker's claims continues, it is crucial for 23andMe customers and users of similar services to monitor their accounts for any suspicious activity. Additionally, users should consider changing their passwords regularly and utilizing unique, strong passwords for each online platform they engage with.
Ultimately, the incident underscores the importance of robust security practices and highlights the ongoing need for individuals and corporations to remain vigilant in the face of cyber threats.