In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • givesomefucks@lemmy.worldEnglish
    0·
    8 months ago

    If they really do blame this on the users

    It’s not that they said:

    It’s your fault your data leaked

    What they said was (paraphrasing):

    A list of compromised emails/passwords from another site leaked, and people found some of those worked on 23andme. If a DNA relative that you volunteered to share information with was one of those people, then the info you volunteered to share was compromised to a 3rd party.

    Which, honestly?

    Completely valid. The only way to stop this would be for 23andme to monitor these “hack lists” and notify any email that also has an account on their website.

    Side note:

    Any tech company can provide info if asked by the police. The good ones require a warrant first, but as data owners they can provide it without a warrant.

    • LUHG@lemmy.worldEnglish
      0·
      8 months ago

      That’s not 23 and me fault at all then. Basically boils down to password reuse. All i would say is they should have provided 2fa if they didn’t.

      • 52fighters@kbin.social
        0·
        8 months ago

        All i would say is they should have provided 2fa if they didn’t.

        At this point, every company not using 2FA is at fault for data hacks. Most people using the internet have logins to 100’s of sites. Knowing where to do to change all your passwords is nearly impossible for a seasoned internet user.