Episode Details

23andMe’s massive 2023 data breach exposed millions of users’ genetic and personal data, leading to an $18 million penalty from New York’s AG Letitia James and other states. The settlement targets glaring cybersecurity failures — no MFA, weak password checks, and lax oversight — with some data even sold on the dark web. The fallout includes heightened identity theft risks, and 23andMe’s blame-shifting over customer account setups drew sharp criticism. Complicating matters, the company filed for bankruptcy in March 2025, selling customer data to a nonprofit tied to its founder — prompting AGs to impose new security mandates, including risk assessments and a data safety advisory board, to prevent future breaches. This case underscores that protecting personal data — especially genetic info — must never be an afterthought.

Listen in comfort:
Get a discount on a Soli Pillow: http://solipillow.com/discount/dnn.

Advertise on DNN:
advertise@thednn.ai

This is an automated, high-level news summary based on public reporting.
Report issues to feedback@thednn.ai.

View sources & latest updates:
https://sources.thednn.ai/569b10a93e5d4db8