23andMe tells victims it's their fault that their data was breached | TechCrunch

3 years ago by Eezyville to c/cybersecurity

In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

They're blaming customers for not having good cybersecurity practices instead of themselves for not having good cybersecurity practices.

load all comments

thebardingreen 31 points 3 years ago

From a PSA stand point, 23andMe makes a really good point here.

From a Legal / Responsible Data Custodian perspective, it's the same collective responsibility bullshit that the oil industry likes to shit out about climate change.

save

path: 0 6385894, hotness: undefined, score: 31, children: 5

mozz 14 points 3 years ago

save

path: 0 6385894 6387366, hotness: undefined, score: 14, children: 3

starman2112 7 points 3 years ago

The issue isn't just reuse of passwords. Only about 14,000 accounts were breached because of bad passwords. The problem is that those 14k accounts allowed bad actors to access the personal information of nearly 7 million people. It's less "you shouldn't have reused your password," it's more "your neighbor's cousin's sister-in-law's nephew shouldn't have reused his password"

save

path: 0 6385894 6387366 6388498, hotness: undefined, score: 7, children: 2

mozz 3 points 3 years ago

save

path: 0 6385894 6387366 6388498 6388676, hotness: undefined, score: 3, children: 0

dream_weasel 1 point 3 years ago

... And you should not opt in to sharing data with people whose security practices you don't know.

Don't print your SSN and give it to your inlaws or your grandma. Or your credit card info or anything else.

save

path: 0 6385894 6387366 6388498 6390773, hotness: undefined, score: 1, children: 0