23andMe private user data is up for sale in the Dark Web

[Tautalus]

The 23andMe accounts of millions of peoples were compromised, according to claims on Dark Web forums. 23andMe claims that their database was not hacked per se, but that they accessed a large amount of internal information through an apparently basic technique of credential stuffing. In other words, they entered the database with the name and password obtained in other cyber attacks.
Millions of users whose login details were similar to those of other services were hacked. Among the data obtained are names, photographs, geolocation and information about "DNA Relatives", an optional service offered by the company to discover which other people you have some type of genetic connection with. The initial leak indicates that a database with "1 million lines of data on Ashkenazi individuals" - one of the main Jewish ethnic groups - was put up for sale. In addition, a database with information on 300,000 users of Chinese origin was put up for sale.

https://arstechnica.com/security/20...a-is-up-for-sale-after-online-scraping-spree/

https://blog.23andme.com/articles/addressing-data-security-concerns

 

[Riverman]

That's not really a hack on 23andMe, because they used user logins to gain access to the data this user could see. The logins came from other real hacks or were acquired in another way unrelated to 23andMe.
Basically most of the data, if I understood it correctly, is half-public anyway.

 

[Tautalus]

They say that the “information obtained may have included users’ display name, profile photo, profile sex, birth year, location, predicted relationships to their match, the percent DNA match and number of shared genetic segments and portions of their genetic ancestry results, including haplogroups, which provide information about ancestry”.
This information is private data and the 23andMe users can only see it because of their genetic relationship with other users through the DNA Relatives tool.
Without a 23andMe user profile, a genetic relationship and an opt-in choice to discover their relatives there is no access to this information.​