Hackers advertised 23andMe stolen data two months ago
Reading Time: 2 minutesGenetic testing company 23andMe has been investigating a security incident after hackers advertised a trove of alleged stolen user data on a hacking forum last week. But the alleged stolen data may have been circulating for much longer than first known.
On August 11, a hacker on a known cybercrime forum called Hydra advertised a set of 23andMe user data that matches some of the data leaked last week on another hacking forum called BreachForums.
The hacker claimed in the earlier post on Hydra to have 300 terabytes of stolen 23andMe user data, and said they contacted 23andMe, ‘but instead of taking the matter seriously, they asked irrelevant questions.’ The hacker asked for $50 million for the data, and claimed they would only sell it once, but also offered to sell only a subset of data for between $1,000 and $10,000.
But at least one person saw the Hydra post and publicized it on the open internet long before news of the leak was reported last week. On the same day as the Hydra forum post, a Reddit user wrote on the 23andMe unofficial subreddit, alerting other users of the alleged breach.
In the Hydra post, the hacker shared the alleged genetic data of a senior Silicon Valley executive, which contained the same user profile and genetic data found in one of the datasets advertised last week on BreachForums, though the two datasets are structured differently. The datasets advertised on BreachForums allegedly contain one million 23andMe users of Jewish Ashkenazi descent and 100,000 23andMe Chinese users.
23andMe has repeatedly declined to confirm whether the leaked data is legitimate. The company declined to answer a series of questions for this story, including whether it was aware of this hacking forum post from two months ago.
Essentially, 23andMe is blaming users for re-using passwords, and saying the leak was caused by hackers getting into those users’ accounts and then scraping their data, including the victim’s relatives.
The company has also pointed to a specific feature that may explain how hackers amassed so much data. 23andMe has an opt-in feature called DNA Relatives, which allows users to appear in the accounts of other users who have also opted-in to the feature.
It’s unclear if all the advertised data is legitimate, or how much legitimate data hackers actually possess. It’s not uncommon for hackers to exaggerate what data they have in order to increase the chance of selling it on hacking forums.
Reference: https://techcrunch.com/2023/10/10/hackers-advertised-23andme-stolen-data-two-months-ago/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG