23andMe Holding Co (NASDAQ:ME) Jewish and Chinese Users
23andMe (ME) faced a massive data breach in December 2023, impacting 7 million users. Hackers targeted Jewish and Chinese customers, selling their genetic information on the dark web. The company failed to disclose this targeting, leading to potential risks for affected customers. Lawsuits have been filed, alleging negligence and lack of transparency.
Negative
Potential risks for affected customers due to the disclosure of personal genetic information on the dark web.
Allegations of negligence and lack of transparency against 23andMe for not disclosing the targeting of Jewish and Chinese customers by hackers.
The incident involving 23andMe highlights significant cybersecurity vulnerabilities within the genetic testing industry. The targeted nature of this breach, focusing on specific ethnic groups, raises concerns about the potential for genetic information to be misused for discriminatory purposes. The sale of genetic information on the dark web can lead to a myriad of risks, including identity theft, extortion and even bio-targeting.
From a cybersecurity perspective, the delay in disclosing the full extent of the breach is troubling. Timely notification is critical to allow affected individuals to take protective measures. Furthermore, the company's attempt to shift blame to customers for reusing login credentials, while a valid security concern, does not absolve the company of its responsibility to safeguard user data with robust security measures.
It's imperative for companies holding sensitive data to implement advanced encryption methods, continuous monitoring and to educate users on best practices for account security. The impact of this breach on 23andMe's reputation and user trust could have significant long-term consequences for the company.
The filed class action lawsuit against 23andMe has substantial legal implications. Not only is the company facing accusations of failing to protect sensitive customer data, but the allegation that it concealed vital details about the breach could lead to increased scrutiny under data protection laws. In jurisdictions with stringent data privacy regulations, such as California's CCPA or Europe's GDPR, the penalties for non-compliance can be severe.
The specific targeting of Jewish and Chinese customers could also introduce elements of discrimination and hate crimes into the legal proceedings. If the company is found to have not taken adequate steps to inform the affected groups, it could face additional claims of negligence. The legal outcomes of this case could set a precedent for how genetic data breaches are handled in the future and may lead to calls for more robust data privacy legislation.
The breach at 23andMe is likely to have immediate and long-term financial repercussions for the company. In the short term, the company may experience a decline in user trust and brand reputation, potentially leading to a decrease in new user sign-ups and an increase in churn rates. The costs associated with the legal proceedings, potential settlements and increased security measures will likely impact the company's financial performance.
In the long term, the breach could lead to increased regulatory costs and the need for significant investments in cybersecurity infrastructure. Moreover, if the breach results in stricter industry regulations, the entire genetic testing sector could face higher compliance costs. Investors should monitor the situation closely, as the breach could affect not only 23andMe's stock price but also the valuation of similar companies in the genetic testing market.
02/26/2024 - 12:15 PM
NEW YORK, NY / ACCESSWIRE / February 26, 2024 / 23andMe (NASDAQ:ME) was hacked in December 2023, affecting approximately 7 million users of its genetic services website. According to a recently filed class complaint, hackers who infiltrated 23andMe's system were after the personal information of Jewish and Chinese customers, but the company hid that detail when notifying affected customers.
The hackers specifically targeted the personal genetic information of Jewish and Chinese customers and compiled that data - including genetic heritage, names, and addresses - into lists that were then sold on the dark web, but 23andMe concealed both those revelations when it announced the extent of the breach in December 2023.
According to the lawsuit, the hacker leaked a list of over 1 million Jewish customers expressly in retribution for the Israel-Hamas war. The hacker was also more than happy to leak a list of 350,000 Chinese customers upon request from a user with the alias "Wuhan."These lists generated a huge amount of interest from hackers on the dark web from all over the world and were shared and reshared an untold number of times.
The disclosure of these lists threatens the safety of those customers, including from the Chinese government, which has a long history of tracking Chinese citizens.
According to the lawsuit,to this day, 23andMe has not informed the 7 million compromised customers that their personal genetic information was disclosed on the dark web, nor has it told its Jewish and Chinese customers that they were specifically targeted.
IF YOU ARE A VULNERABLE person whose personal genetic information identifies you as having Ashkenazi Jewish heritage or Chinese ancestry , and/or live in California, Illinois, Oregon, or Alaska, please contact us to review your rights and eligibility for compensation :
According to a recently filed class action complaint, on Oct. 1, 2023, a hacker using the alias "Golem" leaked the 23andMe data of 1 million Ashkenazi Jews on Breach Forums, calling it "the most valuable data you'll ever see."
"Golem's explicit targeting of Jewish 23andMe users is further conveyed by his use of the character 'Gollum' from The Lord of the Rings - a creature driven by greed with ugly and outsized facial features - as his profile picture."
A few hours later, a user with the alias "Wuhan" asked Golem if he had "Chinese accounts," according to the complaint. The next day, Golem leaked the data of 7 million users, saying in the post that the customer information included phenotype and health information, photos, and identification data.
Golem listed prices for the customer profiles at $1,000 for 100 profiles, $5,000 for 1,000 profiles, $20,000 for 10,000 profiles and $100,000 for 100,000 profiles.
Interest in the leaked Jewish and Chinese information was immediate and overwhelming following an Israeli bombing of a Palestinian hospital.
23andMe attempted to shift the blame to customers, telling them the breach was a result of customers using recycled login credentials from their accounts on other websites.Further, 23andMe then waited until December to report that 7 million customers were directly affected by the breach and didn't say anything about the data being sold on the dark web or that Jewish and Chinese customers were specifically targeted.
Levi Korsinsky, LLP is investigating whether affected customers are entitled to compensation. If you have received a notice about the data breach, you may be entitled to compensation. There is no cost or obligation to participate. Follow the link below to find out more:
https://bit.ly/3sYm8Cn
Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against large corporations. The firm's team of over 70 extraordinary attorneys and professionals have a winning track record going against the most powerful defense attorneys in the world and know how to maximize your compensation. The firm is a 100% contingency firm - we don't get paid unless you get paid! Please visit us as www.zlk.com for more information. Attorney Advertising. Prior results do not guarantee similar outcomes.
Levi & Korsinsky, LLPjlevi@levikorsinsky.com www.zlk.com
CONTACT: jlevi@levikorsinsky.com https://zlk.com/
SOURCE: Levi & Korsinsky, LLP
press release on accesswire.com
23andMe faced a data breach in December 2023, impacting 7 million users due to hackers targeting Jewish and Chinese customers.
Approximately 7 million users of 23andMe were impacted by the data breach in December 2023.
Hackers targeted the personal genetic information of Jewish and Chinese customers of 23andMe, including genetic heritage, names, and addresses.
23andMe failed to disclose the targeting of Jewish and Chinese customers by hackers, potentially exposing affected customers to risks.
Lawsuits have been filed against 23andMe, alleging negligence and lack of transparency in handling the data breach and failing to inform customers about the targeting of specific groups.
Hackers compiled lists of Jewish and Chinese customers' genetic information, selling it on the dark web, which could pose risks to the affected customers.
If you are a vulnerable person with Ashkenazi Jewish heritage or Chinese ancestry, or live in specific states, contact the authorities to review your rights and eligibility for compensation.
23andMe attempted to shift the blame to customers, alleging that the breach was a result of customers using recycled login credentials from other websites before eventually disclosing the extent of the breach in December 2023.
