A hacker has leaked an additional 4.1 million stolen 23andMe genetic data profiles for people in Great Britain and Germany on a hacking forum.
23andMe told BleepingComputer that this data was obtained through credential stuffing attacks on accounts using weak passwords or credentials exposed in other data breaches.
Yesterday, a threat actor named ‘Golem,’ who is allegedly behind the 23andMe attacks, leaked an additional 4.1 million data profiles of people in Great Britain and Germany on the BreachForums hacking forum.
Today, the same hacker released an additional CSV file containing the 23andMe data of 139,172 people living in Germany.
These leaks have already led to a myriad of lawsuits against 23andMe that claim there is a lack of information about the breach and that the company did not adequately protect customers’ data.
23andMe hit with lawsuits after hacker leaks stolen genetics data.
