In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • TORFdot0@lemmy.worldEnglish
    92·
    10 months ago

    You shouldn’t have shared your information with someone who is untrustworthy then. Data sharing is opt-in.

    • Hegar@kbin.social
      12·
      10 months ago

      Credential stuffing attacks will always yield results on a single use website because no one changes passwords on a site they don’t use anymore.

      Launching a feature that enables an inevitable attack to access 500 other people’s info is very clearly the fault of the company who launched the feature.