According to Bleeping Computer, A hacker has leaked an additional 4.1 million stolen 23andMe genetic data profiles for people in Great Britain and Germany on a hacking forum. Earlier this month, a threat actor leaked the stolen data of 1 million Ashkenazi Jews who used 23andMe services to find their ancestry info and genetic predispositions.
Estimated reading time: 3 minutes
Data breaches are always a big deal, and we turned to Roger Neal, Head of Products at Apona Security, to offer some insight into this latest breach. Here’s what he had to say about this unfortunate situation:
“The recent hacking incident at 23andMe emphasizes the growing occurrence of cyber threats and the substantial impacts they bear on targeted organizations. The attack vector, traced back to a technique as old as credential stuffing, led to the leakage of over 5 million genetic data profiles. The fallout for 23andMe is manifold; it’s grappling with a potential financial drain running into billions, alongside a tarnished reputation which could deter current and prospective customers.
This incident really shows the critical need for robust data security measures like proactive data encryption, proper access management across all organizations, and higher password management standards no matter their size. It’s a wake-up call for organizations to fortify their cybersecurity fortresses, ensuring the safety and trust of the clientele they serve.
The importance of 2FA is really highlighted when considering the sensitive nature of the data handled by organizations like 23andMe. Genetic information is not only personal but also immutable; once leaked, the consequences can be far-reaching and everlasting. Hence, ensuring the highest level of security is not a mere organizational prerogative but a critical necessity. And it’s sad to think that a measure, so small, could have prevented the soon-to-be bigger and already massive catastrophe.
Although there are a lot of bad to this incident, the 23andMe incident opens eyes and really shines a spotlight on the importance of continuous education and awareness among users regarding cyber hygiene. Simple practices such as not reusing passwords across platforms, utilizing password managers, and regularly updating passwords can significantly mitigate the risks associated with credential stuffing. But better yet, an organization that takes the steps to implement biometric authentication can increase ease.
In conclusion, the 23andMe data breach serves as a reminder of the evolving cyber threat landscape. The adoption of rigorous security measures like data encryption, access management, and Two-Factor Authentication, coupled with a well-informed user base, will be instrumental in leading us into a safer digital environment for both individuals and organizations. Through collective vigilance and the adoption of robust security best practices, we can significantly mitigate the risks and ensure the sanctity and security of sensitive data in the digital realm for the people who entrust us with it.”
What do you think of this data breach? Please use the buttons below to comment on social media.
In some of our articles and especially in our reviews, you will find Amazon or other affiliate links. As Amazon Associates, we earn from qualifying purchases. Any other purchases you make through these links often result in a small amount being earned for the site and/or our writers. Techaeris often covers brand press releases. Doing this does not constitute an endorsement of any product or service by Techaeris. We provide the press release information for our audience to be informed and make their own decision on a purchase or not. Only our reviews are an endorsement or lack thereof. For more information, you can read our full disclaimer.
