23andMe

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

• 2026-09-25 · 23andMe, 2023-10-06 · lawsuits_ref: in-re-23andme-breach-mdl
• 2026-09-25 · 23andMe, 2023-10-06 · fine_usd: 21100000
• 2026-09-25 · 23andMe, 2023-10-06 · lawsuit: GBP 2.31M ICO fine (June 2025); USD 18M 43-AG settlement (July 2026)
• 2026-09-25 · 23andMe, 2023-10-06 · summary: Between April and September 2023 a hacker used credentials reused from other breaches to access 23andMe accounts, exposing data on about 6.9 million users, including 155,592 UK residents. The ICO fined 23andMe GBP 2.31M, noting it lacked ex
• 2026-09-25 · 23andMe, 2023-10-06 · title: Credential stuffing exposed 6.9M users' ancestry data; UK ICO fine of GBP 2.31M
• 2026-09-25 · 23andMe, 2023-10-06 · status: settled
• 2026-09-25 · 23andMe, 2023-10-06 · fine_usd: 30000000
• 2026-09-25 · 23andMe, 2023-10-06 · lawsuit: $30M US class action settlement (2024); UK ICO fine of GBP 2.31M (2025)
• 2026-09-25 · 23andMe, 2023-10-06 · sector: health
• 2026-09-25 · 23andMe, 2023-10-06 · attack: credential-stuffing
• 2026-09-25 · 23andMe, 2023-10-06 · data_types: ["names","dob","location","health","other"]
• 2026-09-25 · 23andMe, 2023-10-06 · records_basis: organization
• 2026-09-25 · 23andMe, 2023-10-06 · records: 6900000
• 2026-09-25 · 23andMe, 2023-10-06 · disclosed: 2023-10-06
• 2026-09-25 · 23andMe, 2023-10-06 · discovered: 2023-10
• 2026-09-25 · 23andMe, 2023-10-06 · summary: Attackers reused passwords from other breaches to log in to 23andMe accounts between April and September 2023 and scraped profile and ancestry data shared through the DNA Relatives feature. The company later said about 6.9 million people we
• 2026-09-25 · 23andMe, 2023-10-06 · title: Credential stuffing exposes DNA Relatives profiles of 6.9 million users
• 2026-09-25 · 23andMe · domain: 23andme.com
• 2026-09-25 · 23andMe, 2023-10-06 · added
• 2026-09-25 · 23andMe · added