US EditionJoint investigation by Canada and U.K. says 23andMe failed to protect customer data
UNITED KINGDOM, JUN 17 – The UK Information Commissioner's Office fined 23andMe £2.31 million for failing to protect genetic data of 155,592 UK users during a 2023 credential stuffing cyberattack.
- The UK Information Commissioner's Office fined 23andMe £2.31 million on June 17, 2025, for failing to protect personal and genetic data during a 2023 data breach.
- The breach started in April 2023 through credential-stuffing attacks that compromised about 14,000 accounts, resulting in the exposure of personal information connected to approximately 6.9 million individuals worldwide.
- Investigations by UK and Canadian privacy regulators found that 23andMe had inadequate security systems, delayed response, and insufficient safeguards despite warning signs before the breach.
- John Edwards, the UK Information Commissioner, described the incident as a serious violation that revealed confidential personal details, including genealogical data and medical information, affecting thousands of individuals across the UK.
- Following bankruptcy filing earlier in 2025, 23andMe is set to be sold for $305 million to co-founder Anne Wojcicki's nonprofit, which has pledged stronger privacy protections moving forward.
76 Articles
76 Articles
Cambridge Times
23andMe failed to protect the sensitive information of 320,000 Canadians, investigation finds. Here’s why genetic company won’t face fines under federal privacy laws
A joint investigation has found 23andMe failed to protect the sensitive data of close to 7 million customers including 320,000 Canadians, but the genetic testing company can’t be made to face fines under current Canadian federal privacy laws.
DNA Testing Firm 23AndMe Fined More Than $4 Million Following Data Breach Probe
DNA testing firm 23andMe has been fined more than $4 million following a joint investigation carried out by Canada and UK privacy officials, which found the company failed to ensure sufficient security measures were in place to protect customers’ personal information, leading to a major data breach in 2023. The joint investigation was conducted by the Office of the Privacy Commissioner of Canada (OPC) and the United Kingdom Information Commissio…
The provision of genetic tests by commercial companies is receiving a fair amount of criticism, especially if consumers can request them. However, the company Genomics does this exclusively on behalf of doctors. A new test that includes clinical factors should also prevent the disease from developing. However, Dutch specialists are not at all convinced.
Coverage Details
Bias Distribution
- 62% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium
