this post was submitted on 03 Jan 2024
828 points (94.2% liked)

Technology

59424 readers
3034 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Hope this isn't a repeated submission. Funny how they're trying to deflect blame after they tried to change the EULA post breach.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 12 points 10 months ago (1 children)

It's actually the user's fault. The emails and passwords came from a different breach, and some of those also worked on 23andMe. This is why you don't reuse passwords.

[–] [email protected] 1 points 10 months ago

It’s actually the user’s fault. The emails and passwords came from a different breach

No, 23andme is very clearly at fault.

Only 0.02% of those who had their personal info leaked were hacked by a credential stuffing attack.

99.8% of victims were victims because the company launched an obviously unsafe feature that allowed intruders to acces 500 other people's details for each compromised account.

No one changes the password on sites they don't use anymore and this is basically a single use service.