Joint investigation by Canada and U.K. says 23andMe failed to protect customer data
- The UK Information Commissioner's Office fined 23andMe £2.31 million on June 17, 2025, for failing to protect personal and genetic data during a 2023 data breach.
- The breach started in April 2023 through credential-stuffing attacks that compromised about 14,000 accounts, resulting in the exposure of personal information connected to approximately 6.9 million individuals worldwide.
- Investigations by UK and Canadian privacy regulators found that 23andMe had inadequate security systems, delayed response, and insufficient safeguards despite warning signs before the breach.
- John Edwards, the UK Information Commissioner, described the incident as a serious violation that revealed confidential personal details, including genealogical data and medical information, affecting thousands of individuals across the UK.
- Following bankruptcy filing earlier in 2025, 23andMe is set to be sold for $305 million to co-founder Anne Wojcicki's nonprofit, which has pledged stronger privacy protections moving forward.
53 Articles
53 Articles
DNA Testing Firm 23AndMe Fined More Than $4 Million Following Data Breach Probe
DNA testing firm 23andMe has been fined more than $4 million following a joint investigation carried out by Canada and UK privacy officials, which found the company failed to ensure sufficient security measures were in place to protect customers’ personal information, leading to a major data breach in 2023. The joint investigation was conducted by the Office of the Privacy Commissioner of Canada (OPC) and the United Kingdom Information Commissio…
The provision of genetic tests by commercial companies is receiving a fair amount of criticism, especially if consumers can request them. However, the company Genomics does this exclusively on behalf of doctors. A new test that includes clinical factors should also prevent the disease from developing. However, Dutch specialists are not at all convinced.


The personal information of 320,000 Canadian clients of the bankrupt 23andMe firm is in the hands of hackers.

Lack of appropriate safeguards led to 23andMe data breach, joint investigation finds
OTTAWA — Canada's privacy watchdog says inadequate security measures opened the door to a data breach discovered two years ago at genetic testing company 23andMe. Privacy commissioner Philippe Dufresne and U.K.
Coverage Details
Bias Distribution
- 52% of the sources lean Left
To view factuality data please Upgrade to Premium