DNA Privacy Alert
This incident from prompts us to ask: How concerning is it if your DNA falls into the wrong hands? A pivotal conversation for the digital age. Also, just to add here… We may need more guidance and procedures to protect genetic material.
Think of DNA like it’s the password to a persons body in a sense.
Incident at 23andMe:
Recent security breach exposes vulnerabilities – is your DNA data truly secure?
Key Details:
On October 1, 2023, a threat actor targeted 23andMe, gaining access to ancestry information, including display names, relationship labels, and percentage DNA shared. This breach, discovered on an unofficial subreddit, raises concerns about the safety of your genetic data.
What Was Compromised:
Your Family Tree profile information, particularly display names, relationship labels, and percentage DNA, may have been compromised. Additional data like self-reported location (city/zip code) and birth year could be at risk if shared in the DNA Relatives feature.
Security Breach Origin:
A credential stuffing attack orchestrated by a threat actor occurred between May and September 2023. The attacker exploited the optional DNA Relatives feature, using compromised usernames and passwords from other breaches.
Immediate Actions Taken:
In response, 23andMe initiated an investigation, engaged third-party experts, and collaborated with law enforcement. Security measures, including password resets, two-step verification, and temporary pausing of specific platform features, were implemented. Efforts are underway to remove re-posted data from other websites.
Protecting Your DNA Data:
• Reset Password: Complete the prompted password reset for added security.
• Enable Two-Step Verification: Strengthen your account with an additional layer of protection.
• Manage Preferences: Visit Customer Care to understand and manage your DNA Relatives profile.
• Secure Your Account: Follow provided guidelines to keep your 23andMe account secure.
#dna #security #databreach #badactors #mindsetchange
: The views expressed in this post are my own. The views within any of my posts or articles are not those of my employer or the employers of any contributing experts. this post? Click the bell icon for more!
