California sues 23andMe over 2023 data breach that affected 7 million users
California is suing Chrome Holding Co., formerly known as 23andMe, over a 2023 data breach that exposed the sensitive genetic and personal information of approximately 7 million users. Attorney General Rob Bonta alleges the company had lax security measures, failed to protect against common cyberattack methods like credential stuffing, and misled consumers about the breach's severity. The lawsuit seeks civil penalties and injunctions, highlighting the particular danger of genetic data being sold on the dark web amidst rising hate crimes. AI
IMPACT Highlights the critical need for robust data security and privacy regulations, especially for companies handling sensitive genetic information.