23andMe’s Mega Breach: DNA Testing Firm Fined £2.31M for Security Flop
The UK’s data watchdog has slapped 23andMe with a £2.31 million fine for a colossal data breach in 2023. Despite 23andMe’s attempts to patch things up, the damage was done, with millions of users’ genetic info exposed. It seems their security measures were about as strong as wet tissue paper.

Hot Take:
Who knew ancestry could lead to a “whoops, we lost your data” moment? 23andMe just learned the hard way that DNA testing isn’t all about learning you’re 2% Viking; it’s also about ensuring your genetic secrets don’t end up on Reddit. With a fine that might leave their piggy bank as empty as their security measures, one could say 23andMe needs a genetic upgrade for their cybersecurity DNA!
Key Points:
- 23andMe fined £2.31 million by the UK’s ICO for a massive data breach exposing user data.
- Security flaws included weak authentication measures and poor monitoring of data threats.
- The breach affected nearly 7 million users due to the DNA Relatives feature.
- The fine was reduced from an initial proposal of £4.59 million after 23andMe’s representations.
- 23andMe has filed for Chapter 11 bankruptcy while improving security measures post-breach.
Already a member? Log in here