23andMe says hackers saw data from millions of users

23andMe says hackers saw data from millions of users

Snippets of genetic data were among personal information accessed by hackers at 23andMe
Snippets of genetic data were among personal information accessed by hackers at 23andMe. Photo: Eric BARADAT / AFP/File
Source: AFP

Personal genetics firm 23andMe on Tuesday confirmed that hackers using stolen passwords accessed the personal information about 6.9 million of its members.

While the hackers were only able to get into about 14,000 accounts, or 0.1 percent of its customers, they were able to see information shared by genetically linked relatives at 23andMe, a spokesperson said in reply to an AFP inquiry.

23andMe is in the process of notifying affected customers and has hardened account security by requiring users to reset passwords and set up a second authentication method such as sending a temporary code to a mobile phone, according to the spokesperson.

In early October, 23andMe detected that data thieves had gotten into accounts safeguarded by login details recycled from other websites that had been compromised, the company said.

Read also

US antitrust regulators probe ExxonMobil's Pioneer deal

"We do not have any indication that there has been a breach or data security incident within our systems, or that 23andMe was the source of the account credentials used in these attacks," the spokesperson said.

Of the 6.9 million accounts hacked, 5.5 million contained information on genetic matches and may have also included birth dates and locations if provided by users, according to 23andMe.

An additional 1.4 million of the hacked accounts had limited access to some DNA profile information as part of the "Family Tree" feature, the spokesperson said.

23andMe was founded in 2006 and is based in Mountain View, California, where Google also has its headquarters.

Source: AFP

Authors:
AFP avatar

AFP AFP text, photo, graphic, audio or video material shall not be published, broadcast, rewritten for broadcast or publication or redistributed directly or indirectly in any medium. AFP news material may not be stored in whole or in part in a computer or otherwise except for personal and non-commercial use. AFP will not be held liable for any delays, inaccuracies, errors or omissions in any AFP news material or in transmission or delivery of all or any part thereof or for any damages whatsoever. As a newswire service, AFP does not obtain releases from subjects, individuals, groups or entities contained in its photographs, videos, graphics or quoted in its texts. Further, no clearance is obtained from the owners of any trademarks or copyrighted materials whose marks and materials are included in AFP material. Therefore you will be solely responsible for obtaining any and all necessary releases from whatever individuals and/or entities necessary for any uses of AFP material.