User data from 23andMe accounts has been leaked and put up for sale on a dark web forum. The data appears to have been gathered from user credentials that were exposed in prior data breaches, and the company's security systems have not been breached, according to 23andMe. In other words, the hackers plugged in leaked username-password combinations into 23andMe accounts in a technique known as "credential stuffing." Those with European or Ashkenazi ancestry are likely to have many matches via the DNA Relatives feature compared to people with Asian or Middle Eastern ancestry, 23andMe also notes on its website. The company — which shares anonymized user data with their consent with third parties — is encouraging users to enable multi-factor authentication to prevent further attacks.

---

Persons: —, Mark Zuckerberg, Sergey Brin, Elon Musk, Anne Wojcicki —, Susan Wojcicki, 23andMe Organizations: Service, Wired