Fact Check: In 2023, hackers accessed the information of nearly seven million customers of 23andMe, raising privacy concerns for the company.

Fact Check: "In 2023, hackers accessed the information of nearly seven million customers of 23andMe, raising privacy concerns for the company."

What We Know

In October 2023, 23andMe experienced a significant data breach where hackers accessed the personal information of approximately 6.9 million users. This breach primarily affected profiles of Ashkenazi Jews and ethnically Chinese users, raising serious privacy concerns (source-1, source-2). The compromised data included sensitive information such as names, profile photos, birth years, locations, and family surnames, which users had opted to share with DNA relatives (source-2).

The breach was facilitated through a method known as "credential stuffing," where hackers used previously compromised passwords from other sites to gain unauthorized access to 23andMe accounts (source-2). Following the breach, 23andMe confirmed the incident and took steps to mitigate the impact, including temporarily disabling certain features and requiring two-factor authentication for users (source-2).

Analysis

The claim that hackers accessed the information of nearly seven million customers of 23andMe in 2023 is substantiated by multiple credible sources. The breach was confirmed by 23andMe itself and reported extensively by reputable news outlets such as The New York Times and CNN (source-3, source-6).

The House Committee on Oversight and Government Reform also highlighted the breach during a hearing focused on privacy and national security concerns, emphasizing the risks associated with the ownership and control of genetic data (source-1). This indicates a recognition of the broader implications of such data breaches, particularly regarding potential misuse by foreign adversaries.

The sources used in this analysis are reliable, including government statements and established news organizations. While the breach's implications are serious, the information provided by these sources is consistent and corroborated, reinforcing the validity of the claim.

Conclusion

Verdict: True
The claim that hackers accessed the information of nearly seven million customers of 23andMe in 2023 is accurate. The breach involved sensitive personal data and has raised significant privacy concerns, as confirmed by multiple credible sources and official statements.

Sources

1. Comer Opens Hearing on Privacy and National Security ...
2. 23andMe data leak
3. Data Breach at 23andMe Affects 6.9 Million Profiles, Company Says
4. DNA testing firm 23andMe files for bankruptcy as demand ...
5. 23andMe Customers Did Not Expect Their DNA Data ...
6. Hackers access profiles of nearly 7 million 23andMe customers
7. Addressing Data Security Concerns - 23andMe Blog
8. Understanding the 23andMe Data Breach & Ensuring ...