23andMe to pay $18 million in new genetics data breach settlement

Summary

Genetic testing company 23andMe will pay $18 million to settle claims from 43 attorneys general. The settlement addresses allegations that the company failed to adequately protect customers' genetic data. This case highlights the importance of robust data security measures for companies handling sensitive personal information.

IFF Assessment

FOE

This settlement indicates a failure in data protection, which is negative for defenders as it points to a compromise of sensitive user data and potential lax security practices.

Defender Context

This breach underscores the critical need for companies to implement strong security controls to protect sensitive personal data, especially genetic information. Defenders should be aware of the evolving legal and regulatory landscape surrounding data privacy and the potential financial and reputational consequences of breaches.

Read Full Story →