23andMe

1 breach6.9M affected in allHealthcare23andme.com

Credential stuffing exposed 6.9M users' ancestry data; UK ICO fine of GBP 2.31MCredential stuffing exposed names, dates of birth, location data and health records. Reported to the California AG.Credential stuffing6.9M affectedHealthcareUSOct 6, 2023

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

lawsuits_ref2026-09-25

23andMe, 2023-10-06in-re-23andme-breach-mdl

fine_usd2026-09-25

23andMe, 2023-10-0621100000

lawsuit2026-09-25

23andMe, 2023-10-06GBP 2.31M ICO fine (June 2025); USD 18M 43-AG settlement (July 2026)

summary2026-09-25

23andMe, 2023-10-06Between April and September 2023 a hacker used credentials reused from other breaches to access 23andMe accounts, exposing data on about 6.9 million users, including 155,592 UK residents. The ICO fined 23andMe GBP 2.31M, noting it lacked ex

title2026-09-25

23andMe, 2023-10-06Credential stuffing exposed 6.9M users' ancestry data; UK ICO fine of GBP 2.31M

status2026-09-25

23andMe, 2023-10-06settled

fine_usd2026-09-25

23andMe, 2023-10-0630000000

lawsuit2026-09-25

23andMe, 2023-10-06$30M US class action settlement (2024); UK ICO fine of GBP 2.31M (2025)

sector2026-09-25

23andMe, 2023-10-06health

attack2026-09-25

23andMe, 2023-10-06credential-stuffing

data_types2026-09-25

23andMe, 2023-10-06["names","dob","location","health","other"]

records_basis2026-09-25

23andMe, 2023-10-06organization

records2026-09-25

23andMe, 2023-10-066900000

disclosed2026-09-25

23andMe, 2023-10-062023-10-06

discovered2026-09-25

23andMe, 2023-10-062023-10

summary2026-09-25

23andMe, 2023-10-06Attackers reused passwords from other breaches to log in to 23andMe accounts between April and September 2023 and scraped profile and ancestry data shared through the DNA Relatives feature. The company later said about 6.9 million people we

title2026-09-25

23andMe, 2023-10-06Credential stuffing exposes DNA Relatives profiles of 6.9 million users

domain2026-09-25

23andMe23andme.com

Added2026-09-25

23andMe, 2023-10-06

Added2026-09-25

23andMe