23andMe Holding Co (NASDAQ: ME) Jewish and Chinese Users
- Massive data breach affecting 7 million 23andMe users
- Hackers targeted Jewish and Chinese customers for their genetic information
- Data sold on the dark web, putting customers at risk
- Lawsuits filed due to alleged negligence and lack of transparency
- Customers' safety compromised due to lack of disclosure
- Potential legal and financial repercussions for 23andMe
- Loss of trust from customers and investors
- Negative impact on company reputation
Insights
The alleged failure of 23andMe to disclose the full extent of the data breach, particularly the targeted nature against Jewish and Chinese customers, raises significant legal concerns. If proven, this could potentially violate various state and federal laws regarding data privacy and breach notification requirements. For example, the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) in the United States mandate timely and transparent communication to affected individuals when personal data is compromised.
Furthermore, the sale of this sensitive information on the dark web could lead to increased scrutiny from regulatory bodies and could result in hefty fines for 23andMe. The legal ramifications may extend beyond financial penalties, as the company could face a loss of consumer trust and subsequent impact on its market value. The lawsuit may also set a precedent for how genetic information breaches are handled in the future, potentially influencing legislation around the protection of biometric data.
The breach of 23andMe's systems and the subsequent sale of personal genetic information on the dark web is a stark reminder of the cybersecurity risks facing companies that handle sensitive data. The specificity of the attack, targeting Jewish and Chinese individuals, suggests a high level of sophistication and intent by the hackers. The incident underscores the importance of robust cybersecurity measures and the need for continuous monitoring and updating of security protocols to defend against evolving threats.
The revelation that customer data was sold in lists and the interest it generated among hackers indicates a thriving black market for personal data. This incident could lead to increased demand for cybersecurity solutions and services as companies seek to prevent similar breaches. For stakeholders, the breach could result in both immediate and long-term reputational damage to 23andMe, potentially affecting its stock performance as investors reassess the risks associated with the company's data security practices.
The unauthorized access and sale of genetic information from 23andMe may have broader implications for the genetic testing industry. Consumer trust is paramount in this sector and such a breach could lead to a shift in consumer behavior, with potential decreases in willingness to share personal genetic information. This could affect not only 23andMe but also other players in the market, as consumers may generalize their concerns about privacy and security across the industry.
Competitors might leverage this breach to differentiate themselves by emphasizing their own security measures, potentially gaining market share. Alternatively, the industry could experience a collective setback if consumers become wary of genetic testing services as a whole. The long-term impact on 23andMe's business model, which relies on the aggregation and analysis of genetic data, could be significant if they are unable to restore consumer confidence and comply with stricter regulations that may arise from this incident.
NEW YORK, NY / ACCESSWIRE / February 13, 2024 / 23andMe (NASDAQ:ME) was hacked in December 2023, affecting approximately 7 million users of its genetic services website. According to a recently filed class complaint, hackers who infiltrated 23andMe's system were after the personal information of Jewish and Chinese customers, but the company hid that detail when notifying affected customers.
The hackers specifically targeted the personal genetic information of Jewish and Chinese customers and compiled that data - including genetic heritage, names, and addresses - into lists that were then sold on the dark web, but 23andMe concealed both those revelations when it announced the extent of the breach in December 2023.
According to the lawsuit, the hacker leaked a list of over 1 million Jewish customers expressly in retribution for the Israel-Hamas war. The hacker was also more than happy to leak a list of 350,000 Chinese customers upon request from a user with the alias "Wuhan."These lists generated a huge amount of interest from hackers on the dark web from all over the world and were shared and reshared an untold number of times.
The disclosure of these lists threatens the safety of those customers, including from the Chinese government, which has a long history of tracking Chinese citizens.
According to the lawsuit,to this day, 23andMe has not informed the 7 million compromised customers that their personal genetic information was disclosed on the dark web, nor has it told its Jewish and Chinese customers that they were specifically targeted.
IF YOU ARE A VULNERABLE person whose personal genetic information identifies you as having Ashkenazi Jewish heritage or Chinese ancestry, and/or live in California, Illinois, Oregon, or Alaska, please contact us to review your rights and eligibility for compensation:
ADDITIONAL BACKGROUND:
According to a recently filed class action complaint, on Oct. 1, 2023, a hacker using the alias "Golem" leaked the 23andMe data of 1 million Ashkenazi Jews on Breach Forums, calling it "the most valuable data you'll ever see."
"Golem's explicit targeting of Jewish 23andMe users is further conveyed by his use of the character 'Gollum' from The Lord of the Rings - a creature driven by greed with ugly and outsized facial features - as his profile picture."
A few hours later, a user with the alias "Wuhan" asked Golem if he had "Chinese accounts," according to the complaint. The next day, Golem leaked the data of 7 million users, saying in the post that the customer information included phenotype and health information, photos, and identification data.
Golem listed prices for the customer profiles at
Interest in the leaked Jewish and Chinese information was immediate and overwhelming following an Israeli bombing of a Palestinian hospital.
23andMe attempted to shift the blame to customers, telling them the breach was a result of customers using recycled login credentials from their accounts on other websites.Further, 23andMe then waited until December to report that 7 million customers were directly affected by the breach and didn't say anything about the data being sold on the dark web or that Jewish and Chinese customers were specifically targeted.
Levi Korsinsky, LLP is investigating whether affected customers are entitled to compensation. If you have received a notice about the data breach, you may be entitled to compensation. There is no cost or obligation to participate. Follow the link below to find out more:
Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against large corporations. The firm's team of over 70 extraordinary attorneys and professionals have a winning track record going against the most powerful defense attorneys in the world and know how to maximize your compensation. The firm is a
Levi & Korsinsky, LLP
Joseph E. Levi, Esq.
33 Whitehall Street, 17th Floor
New York, NY 10004
jlevi@levikorsinsky.com
Tel: (212) 363-7500
Fax: (212) 363-7171
www.zlk.com
CONTACT:
Levi & Korsinsky, LLP
Joseph E. Levi, Esq.
Ed Korsinsky, Esq.
33 Whitehall Street, 17th Floor
New York, NY 10004
jlevi@levikorsinsky.com
Tel: (212) 363-7500
Fax: (212) 363-7171
https://zlk.com/
SOURCE: Levi & Korsinsky, LLP
View the original press release on accesswire.com
FAQ
What was the impact of the data breach on 23andMe (NASDAQ:ME)?
Who were the hackers targeting in the 23andMe data breach?
What actions did 23andMe take after discovering the breach?
What legal issues arose from the 23andMe data breach?
How did 23andMe respond to customer inquiries about the breach?
