news.volyx.in

23andMe confirms hackers stole ancestry data on 6.9M users (techcrunch.com)

555 points by helsinkiandrew · 991 days ago · 297 comments on HN

Article summary

23andMe, a genetic testing company, has confirmed that hackers stole ancestry data on 6.9 million users. The breach occurred due to customers reusing passwords, allowing hackers to access accounts and view personal data of both the account holder and their relatives. The stolen data included names, birth years, relationship labels, and ancestry reports. This incident affects roughly half of 23andMe's total reported 14 million customers.

Main themes

  • genetic data privacy
  • surveillance and tracking
  • informed consent
  • data sharing and research
  • company accountability
  • individual freedom and choice

What commenters say

  • Some argue that individuals should not have to worry about their relatives' data being shared without their consent, as it can reveal personal information about them.
  • Others believe that DNA investigation should not be limited to severe crimes, as it is a valuable investigative tool.
  • There are concerns that the collection and storage of personal genetic data can lead to scope creep and be used for purposes beyond the original intention, such as surveillance or tracking.
  • Some commenters think that disallowing the collection of personal information or requiring anonymity could mitigate these risks, while others believe that this would hinder research and innovation.
  • It is argued that individuals who opt-in to sharing their genetic data should be aware that it may be used for purposes beyond their control, and that companies like 23andMe should be transparent about their data practices.
  • There are differing opinions on whether individuals should be able to donate their genetic data for research purposes, with some arguing that it should be done through non-profit institutions.
  • Some commenters express distrust of companies like 23andMe, believing that they prioritize profits over user privacy and security.