23andMe inherits lawsuit over 'disturbing' DNA data breach
Summary
California's Attorney General has sued 23andMe, alleging the genetics company downplayed a massive data breach that occurred in 2023. The lawsuit claims 23andMe paid a ransom to the attacker after the breach, which exposed sensitive DNA data.
IFF Assessment
This incident highlights a significant data breach involving sensitive personal information, which is negative news for defenders as it shows sophisticated attacks can succeed against large organizations.
Defender Context
This case underscores the critical importance of robust data security for companies handling sensitive personal information, such as genetic data. Defenders should pay attention to the tactics used by attackers in such breaches and the potential regulatory and legal repercussions for organizations that fail to adequately protect user data.