Menu

  • Alerts
  • Incidents
  • News
  • APTs
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Threat Actors
  • Tutorials

Useful Tools

  • Password generator
  • Report an incident
  • Report to authorities
No Result
View All Result
CTF Hack Havoc
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
Hall of Hacks
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
No Result
View All Result
Hall of Hacks
CyberMaterial
No Result
View All Result
Home News

UK Fines 23andMe $3M For Major Data Breach

June 18, 2025
Reading Time: 3 mins read
in News
Ex CIA Analyst Guilty Of Leaking US Secrets

The United Kingdom’s top data privacy regulator has fined the embattled personal genomics company 23andMe more than $3 million. This was for its allegedly poor cybersecurity practices and its slow response to a devastating 2023 data breach. The breach, which revealed the genetic data of millions of the firm’s customers, spanned several months during which 23andMe failed to act. The Information Commissioner’s Office, or ICO, announced the significant £2.31 million fine ($3.14 million) in a press release on Tuesday. This news comes on the heels of Friday’s announcement that a nonprofit will be taking control of the company. The ICO noted that 23andMe failed to require additional verification measures for all users to access and download their raw genetic data.

The genetic testing firm unfortunately broke several key United Kingdom data protection laws, according to the Information Commissioner’s Office. This included failing to require mandatory multi-factor authentication (MFA), secure passwords, and also the use of hard to predict usernames. 23andMe also did not have the proper systems in place to effectively monitor, detect, and respond to various cyber threats. A 23andMe spokesperson said that by the end of 2024, the company had implemented multiple steps to increase its security. The so-called credential stuffing attack first began in April 2023, with intense activity starting a few months later that summer. The personal information of seven million people was compromised.

The ICO’s investigation concluded that the company 23andMe unfortunately missed several key opportunities to act during the long-running data breach. The hacker began the credential stuffing attack in April 2023 but didn’t start their first round of intense activity until May 2023. In July 2023, the hacker used a computer program to log into a free account over a million times as part of an attempt. Later that month, the hacker tried to initiate profile transfers in 400 separate accounts, which should have been a major alert. 23andMe investigated at that point but failed to detect that this was part of a much larger ongoing security data breach.

This significant ICO fine comes just a few days after it was revealed that the TTAM Research Institute is the winning bidder. This non-profit organization, which is run by 23andMe’s Co-Founder and former CEO, Anne Wojcicki, will acquire the company. Statements and assurances have been made by the upcoming buyer to ensure it will respect all of the existing privacy policies. Canada’s Privacy Commissioner, who conducted a joint investigation, said they will be carefully following that the obligations should continue to apply. He also explained that Canadian privacy law does not yet provide him with the ability to issue orders and fines for such breaches. He hopes and expects that the new parliament will be turning its attention to remedying this particular legislative gap very soon.

Reference:

  • UK Slams 23andMe With $3 Million Fine For Failing To Protect Genetic Data
Tags: Cyber NewsCyber News 2025Cyber threatsJune 2025Malwarebytes
ADVERTISEMENT

Related Posts

Spain Busts $11.8M Investment Fraud Ring

Spain Busts $11.8M Investment Fraud Ring

July 4, 2025
Ransomware Gang Hunters International Folds

Ransomware Gang Hunters International Folds

July 4, 2025
Interpol Warns of New West Africa Scam Hub

Interpol Warns of New West Africa Scam Hub

July 4, 2025
Spanish Police Arrest High Profile Hackers

Jury Hits Google Over Android Data Use

July 3, 2025
Spanish Police Arrest High Profile Hackers

Germany and Israel Plan Cyber Partnership

July 3, 2025
Spanish Police Arrest High Profile Hackers

Spanish Police Arrest High Profile Hackers

July 3, 2025

Latest Alerts

Google Removes 352 ‘IconAds’ Fraud Apps

Malicious Firefox Add Ons Steal Crypto Keys

Browser Cache Attack Bypasses Web Security

PDFs Deliver QR Codes in Callback Scams

Critical Sudo Flaws Expose Linux Systems

Unkillable Mac Malware From North Korea

Subscribe to our newsletter

    Latest Incidents

    Tech Incubator IdeaLab Discloses Data Breach

    Brazil’s CIEE One Exposes 248,000 Records

    McLaughlin & Stern Discloses Data Breach

    Cyberattack Hits Medtech Firm Surmodics

    Rhysida Ransomware Hits German Charity WHH

    Hacker Accesses Max Financial’s User Data

    CyberMaterial Logo
    • About Us
    • Contact Us
    • Jobs
    • Legal and Privacy Policy
    • Site Map

    © 2025 | CyberMaterial | All rights reserved

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials
    • Advanced Persistent Threats
    • Threat Actors
    • Report an incident
    • Password Generator
    • About Us
    • Contact Us
    • Advertise with us

    Copyright © 2025 CyberMaterial