DATA BREACH- 23andMe Jewish & Chinese Consumers May be Affected

Rhea-AI Summary

23andMe (NASDAQ:ME) faced a data breach affecting 7 million users, with hackers targeting Jewish and Chinese customers and selling their genetic information on the dark web. The breach compromised personal data, posing potential risks to affected customers. 23andMe failed to disclose the specific targeting of these groups, leading to legal action and concerns over customer safety.

Positive

• None.

Negative

• 23andMe (NASDAQ:ME) experienced a data breach compromising the personal genetic information of 7 million users, with Jewish and Chinese customers specifically targeted. The breach resulted in the sale of customers' data on the dark web, potentially exposing them to various risks. The company's lack of transparency regarding the nature of the breach and its delayed disclosure raise concerns over customer safety and trust, leading to legal actions and investigations.

Insights

Legal Expert

The data breach at 23andMe represents a significant legal vulnerability for the company. The deliberate targeting of genetic information of Jewish and Chinese customers raises concerns of discrimination and intent, possibly influencing the severity of legal action and the level of damages sought. The company's delayed and incomplete disclosure to affected customers, particularly about the data being sold on the dark web and the targeting, could lead to allegations of violating customer trust and data protection laws, potentially resulting in hefty fines and reputational damage. Shareholders should be aware that pending litigation could strain company resources and impact its financial health.

Cybersecurity Analyst

The reported breach indicates a profound cybersecurity failure at 23andMe. The specific targeting and sale of personal and sensitive genetic data of millions of users on the dark web suggests that the company's data protection measures were insufficient. Furthermore, the ability of hackers to command high prices for this data reflects the value and sensitivity of genetic information. Customers' financial details were not mentioned, but the combination of genetic profiles with personal identifiers like names and addresses yields a high risk of identity theft and other frauds. Investors should note cybersecurity improvements will be critical to regain consumer trust and prevent future breaches, which may require significant investment.

Ethical and Privacy Concerns Expert

This incident shines a spotlight on the ethical implications of handling genetic data. The targeting of specific ethnic groups for their genetic information raises alarm bells about privacy and the potential for misuse in ways that could harm individuals or groups. The alleged lack of transparency by 23andMe, by not fully informing affected individuals, exacerbates these concerns and could lead to broader societal backlash and calls for stricter regulation of genetic data. The erosion of trust from both customers and the public could have lasting implications on consumer behavior and the regulatory environment surrounding genetic testing companies.

NEW YORK, NY / ACCESSWIRE / May 10, 2024 / 23andMe (NASDAQ:ME) was hacked in December 2023, affecting approximately 7 million users of its genetic services website. According to a recently filed class complaint, hackers who infiltrated 23andMe's system were after the personal information of Jewish and Chinese customers, but the company hid that detail when notifying affected customers.

The hackers specifically targeted the personal genetic information of Jewish and Chinese customers and compiled that data - including genetic heritage, names, and addresses - into lists that were then sold on the dark web, but 23andMe concealed both those revelations when it announced the extent of the breach in December 2023.

According to the lawsuit, the hacker leaked a list of over 1 million Jewish customers expressly in retribution for the Israel-Hamas war. The hacker was also more than happy to leak a list of 350,000 Chinese customers upon request from a user with the alias "Wuhan."These lists generated a huge amount of interest from hackers on the dark web from all over the world and were shared and reshared an untold number of times.

The disclosure of these lists threatens the safety of those customers, including from the Chinese government, which has a long history of tracking Chinese citizens.

According to the lawsuit,to this day, 23andMe has not informed the 7 million compromised customers that their personal genetic information was disclosed on the dark web, nor has it told its Jewish and Chinese customers that they were specifically targeted.

IF YOU ARE A VULNERABLE person whose personal genetic information identifies you as having Ashkenazi Jewish heritage or Chinese ancestry, and/or live in California, Illinois, Oregon, or Alaska, please contact us to review your rights and eligibility for compensation:

https://bit.ly/3sYm8Cn

ADDITIONAL BACKGROUND:

According to a recently filed class action complaint, on Oct. 1, 2023, a hacker using the alias "Golem" leaked the 23andMe data of 1 million Ashkenazi Jews on Breach Forums, calling it "the most valuable data you'll ever see."

"Golem's explicit targeting of Jewish 23andMe users is further conveyed by his use of the character 'Gollum' from The Lord of the Rings - a creature driven by greed with ugly and outsized facial features - as his profile picture."

A few hours later, a user with the alias "Wuhan" asked Golem if he had "Chinese accounts," according to the complaint. The next day, Golem leaked the data of 7 million users, saying in the post that the customer information included phenotype and health information, photos, and identification data.

Golem listed prices for the customer profiles at $1,000 for 100 profiles, $5,000 for 1,000 profiles, $20,000 for 10,000 profiles and $100,000 for 100,000 profiles.

Interest in the leaked Jewish and Chinese information was immediate and overwhelming following an Israeli bombing of a Palestinian hospital.

23andMe attempted to shift the blame to customers, telling them the breach was a result of customers using recycled login credentials from their accounts on other websites.Further, 23andMe then waited until December to report that 7 million customers were directly affected by the breach and didn't say anything about the data being sold on the dark web or that Jewish and Chinese customers were specifically targeted.

Levi Korsinsky, LLP is investigating whether affected customers are entitled to compensation. If you have received a notice about the data breach, you may be entitled to compensation. There is no cost or obligation to participate. Follow the link below to find out more:

https://bit.ly/3sYm8Cn

Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against large corporations. The firm's team of over 70 extraordinary attorneys and professionals have a winning track record going against the most powerful defense attorneys in the world and know how to maximize your compensation. The firm is a 100% contingency firm - we don't get paid unless you get paid! Please visit us as www.zlk.com for more information. Attorney Advertising. Prior results do not guarantee similar outcomes.

Levi & Korsinsky, LLP
Joseph E. Levi, Esq.
33 Whitehall Street, 17th Floor
New York, NY 10004
jlevi@levikorsinsky.com
Tel: (212) 363-7500
Fax: (212) 363-7171
www.zlk.com

CONTACT:
Levi & Korsinsky, LLP
Joseph E. Levi, Esq.
Ed Korsinsky, Esq.
33 Whitehall Street, 17th Floor
New York, NY 10004
jlevi@levikorsinsky.com
Tel: (212) 363-7500
Fax: (212) 363-7171
https://zlk.com/

SOURCE: Levi & Korsinsky, LLP

View the original press release on accesswire.com

FAQ

How many users were affected by the 23andMe data breach?

Approximately 7 million users of 23andMe's genetic services website were affected by the data breach.

Which specific groups were targeted by hackers in the 23andMe breach?

Hackers specifically targeted Jewish and Chinese customers of 23andMe, compromising their personal genetic information.

What actions did the hackers take after infiltrating 23andMe's system?

The hackers compiled lists of Jewish and Chinese customers' genetic information, including heritage, names, and addresses, which were sold on the dark web.

What potential risks do the affected 23andMe customers face due to the data breach?

The compromised customers face risks such as exposure of personal genetic information, potential tracking by authorities, and overall safety concerns.

What regions are affected customers advised to contact for compensation and review of rights?

If you are a vulnerable person with Ashkenazi Jewish heritage or Chinese ancestry, and/or reside in California, Illinois, Oregon, or Alaska, you are advised to contact Levi & Korsinsky for compensation and review of your rights.