https://www.theregister.com/2025/06/17/23andme_ico_fine/ – 23andMe hit with £2.3M fine after exposing genetic data of millions
The UK’s data watchdog is fining beleaguered DNA testing outfit 23andMe £2.31 million ($3.13 million) over its 2023 mega breach.
Among the various security failings demonstrated by the genetics company were:
Unsatisfactory authentication measures, including lack of mandatory MFA and [url=https://www.theregister.com/2024/01/04/23andme_victim_blaming_breach/]unsecure password requirements[/url]
No measures taken to prevent accessing and downloading raw genetic data
No measures to adequately monitor, detect, or respond to security threats to user data ...[/quote]
Regards