Hacker Puts 23andMe User Data Up for Sale on the Internet
(Bloomberg) -- An anonymous hacker is claiming to be selling “millions” of genetic profiles cobbled together from hijacked 23andMe customer accounts.
Most Read from Bloomberg
Israel Latest: US to Offer Citizens Charter Flights From Israel
Apollo CEO Marc Rowan Demands UPenn Leaders Quit Over ‘Antisemitism’
Stocks Drop as CPI, Weak Bond Auction Lift Yields: Markets Wrap
Ghost in the Machine: How Fake Parts Infiltrated Airline Fleets
The seller suggested the profiles, which include email addresses, photos, gender, date of birth and DNA ancestry, could be used to target users based on their ethnicity.
23andMe Holding Co., a genetics test kit company that offers ancestry and health reports by analyzing a person’s saliva, confirmed Friday that genuine customer data was for sale on a hacker forum. However, a spokesperson told Bloomberg News the company found no indication of a breach in its information systems. Instead, it appeared the attacker had logged into individual customers’ accounts on 23andMe by re-using credentials found in databases for hacked accounts of other services on the internet.
The hacker also seemed to create profiles of additional people by copying the names of the 23andMe customers’ relatives who had been connected using the company’s “DNA Relatives” tool. 23andMe’s DNA Relatives feature let users connect with potential relatives who share similar DNA and exchange their genetic profiles.
“We are taking this issue seriously and will continue our investigation to confirm these preliminary results,” 23andMe said in a statement.
On Oct. 2, an anonymous seller posted that they had a “one million Ashkenazi database” on a forum for selling hacked data, referring to people of central and eastern European Jewish heritage.
Most Read from Bloomberg Businessweek
The War in Israel Shows How Social Media’s Idealistic Era Has Ended
Business Schools Aim to Build Entrepreneurs With Expanded Programs
Worst US Bond Selloff Since 1787 Marks End of Free-Money Era
©2023 Bloomberg L.P.
