Yeah I knew submitting dna samples to companies wasn't a good idea because they give data to police departments but it didn't occur to me to use it to target minorities.
The accounts compromised were ones that had reused their passwords and the only way to get genomic data from an account is for a link to be sent to your email account.
Something something about police departments targeting minorities...
Some of those that work forces...
“We believe that the threat actor may have then, in violation of our terms of service, accessed 23andme.com accounts without authorization and obtained information from those accounts.”
Good to know that these cybercriminals not only skirted the law but also the TERMS OF SERVICE. Must be hardened types to go and break ToS.
Credential stuffing attack. Who wants to wager that the compromised accounts had a LastPass and have never changed their password?
Specifically Jews? Yeesh, that doesn't sound good.
This is a most excellent place for technology news and articles.
