23AndMe.com

In October 2023 genetics and data company 23andMe experienced a massive data breach affecting approximately 6.9 million users. The incident occurred through a credential stuffing attack where hackers gained access to accounts by using passwords leaked from other platforms. Once inside individual accounts the attackers utilized the DNA Relatives feature to scrape sensitive information about family members and ethnic ancestry. The leaked data included names birth years relationship labels and location details. The company faced significant legal and financial consequences due to the exposure of highly sensitive genetic heritage information.