--- title: "Oops, Your Ancestors Have Been Hacked! A Closer Look at the 23andMe Data Breach | Vorlon Blog: Bite sized breaches" description: Discover the details surrounding the recent 23andMe breach in our comprehensive overview. Gain insights into the breach, its impact, and the measures taken by 23andMe to address the situation. Explore the legal aspects and find guidance on securing your online genetic data in light of this cybersecurity incident. image: https://vorlon.io/hubfs/Bite%20Sized%20Breaches%20(y).png --- [Saas Security Blog](https://vorlon.io/saas-security-blog) > Oops, Your Ancestors Have Been Hacked! A Closer Look at the 23andMe Data Breach # Oops, Your Ancestors Have Been Hacked! A Closer Look at the 23andMe Data Breach [Lauren Lee](https://vorlon.io/saas-security-blog/author/lauren-lee) | Nov 03, 2023 [![Share on linkedin](https://vorlon.io/hubfs/ll-assets/Images/Icons/LinkedIn.svg) ](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Foops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://vorlon.io/hubfs/ll-assets/Images/Icons/X.svg) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Foops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Foops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Oops%2C+Your+Ancestors+Have+Been+Hacked%21+A+Closer+Look+at+the+23andMe+Data+Breach+%7C+Vorlon+Blog%3A+Bite+sized+breaches) [![Share on email](https://vorlon.io/hubfs/ll-assets/Images/Icons/envelope.svg) ](mailto:?subject=Check%20out%20https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Foops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Foops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Oops, Your Ancestors Have Been Hacked! A Closer Look at the 23andMe Data Breach](https://vorlon.io/hs-fs/hubfs/Bite%20Sized%20Breaches%20(y).png?width=1200&height=820&name=Bite%20Sized%20Breaches%20(y).png) ## Introduction Hey everyone, let’s chat about something that’s a bit more serious than finding out you’re 2% Neanderthal – the recent 23andMe breach. It’s like one of those family reunions where a long-lost cousin shows up uninvited, except this time, it’s a bunch of hackers, and they didn't come for the potato salad. ‍ ### The “How Did That Just Happen?” Part ‍ So, here’s the scoop on how our genetic gatecrashers got in. It wasn’t a fancy Ocean’s Eleven heist on 23andMe’s vault; it was a [credential stuffing attack](https://www.bleepingcomputer.com/news/security/genetics-firm-23andme-says-user-data-stolen-in-credential-stuffing-attack/). Picture a bunch of bad guys trying keys (aka passwords) in a lock until – voilà – they find one that turns! ‍ These troublemakers launched what the tech gurus call a "credential stuffing attack." That’s where they take a wild guess that you’ve used the same password for your 23andMe account as you did for, say, your old college email. And it turns out, some folks actually did. To top it off, these digital delinquents cranked up the efficiency by letting bots do the legwork, hammering away at account after account with their sneaky password playbook. ‍ Moral of the story? Using your favorite password for everything might be easy to remember, but it's like handing out spare keys to your online life to anyone who’s asking. Not the best move for keeping your accounts secure. ### Who Got Hit and What Did They Take? ‍ Imagine if someone could take a peek at your family's photo album – except it's your DNA album. That’s pretty much what happened. The breach might have let loose stuff like your name, birthday, location, and the DNA results that tell you whether you’re more pasta or paella. ‍ A 23andMe spokesperson gave us some more details on the widespread effects of the breach. Picture this: It all began when some digital party crashers slipped into a couple of 23andMe accounts – just a few at first. But whoops, it turns out they hit the data jackpot thanks to a feature called 'DNA Relatives.' You know, that cool tool that's supposed to help you find your long-lost cousins? Well, it kinda turned into a VIP pass for the hackers to grab more info than we bargained for. The 23andMe folks are saying the number of individuals with their details out in the wild is a bit of a head-scratcher – they're still trying to pin down just how many profiles got gatecrashed. ‍ ### Now What? Remediation Steps ‍ After the digital dust-up at 23andMe, they've been [all hands on deck to patch things up](https://blog.23andme.com/articles/addressing-data-security-concerns?utm_medium=search_brand&utm_source=google&gad_source=1&gclid=Cj0KCQjwtJKqBhCaARIsAN_yS_lDKYm9V1rO930wZT7Rkn6rW3okV54LGWlLRtu5agk8crfaqtCFVn8aAiSVEALw_wcB&gclsrc=aw.ds). If your account got a bit too much attention from the wrong crowd, you'll be setting up a shiny new password. It's like getting a new key for a lock that's had one too many uninvited guests. They're also on high alert now, keeping an eye out for any more shenanigans. ‍ Plus, they're nudging everyone to not just make their passwords tough to crack but also to buddy up with two-factor authentication—it's like having a really nosy neighbor who double-checks anyone coming to your door. So if you're in the 23andMe circle, it's time to armor up your account. ‍ ### 23andMe, You’ve Been Served! ‍ And now for the courtroom drama. 23andMe is facing [some lawsuits](https://www.bleepingcomputer.com/news/security/23andme-hit-with-lawsuits-after-hacker-leaks-stolen-genetics-data/) because some people feel they didn't keep the family jewels (aka our genetic info) under lock and key. The suits claim that the company could’ve done more to protect that super personal data. So, some legal eagles are now circling over this one. ‍ So, you know that 'DNA Relatives' feature on 23andMe that we mentioned earlier? The one where you opt in to play ancestral connect-the-dots? Turns out, even though folks signed up for it willingly, they're not too thrilled. They figured that just because they shared their info, it didn’t mean the company could skimp on safeguarding their data. ‍ And get this – some members who did everything right, like using super strong passwords and setting up two-factor authentication (2FA), still got caught in the net. Despite playing defense, their personal info ended up on the wrong side of the internet, like old family photos popping up in a cybercrime flea market. Yikes! ‍ ## To Wrap It Up ‍ There you have it – a not-so-fun chapter in the story of personal genetics. The 23andMe breach is a reminder for all of us to be a bit more guarded about our online secrets. As for the companies we trust with our innermost info? It’s a wake-up call that safeguarding our digital selves is super important. Stay safe out there, and let’s keep our genetic history in the family, okay? ‍ About the author ![Lauren Lee](https://vorlon.io/hs-fs/hubfs/Lauren%20Lee%20headshot%20clear%20bg.png?width=120&height=120&name=Lauren%20Lee%20headshot%20clear%20bg.png) [Lauren Lee](https://vorlon.io/saas-security-blog/author/lauren-lee) [Follow me on LinkedIn ](https://www.linkedin.com/in/laurenleeeee/) Lauren Lee is a Sales Engineer at Vorlon with eight years of cybersecurity experience. Before Vorlon, she held a variety of vendor and client-side technical cybersecurity positions, including roles at Palo Alto Networks, Cylance, the U.S. Department ... [Read Full Bio](https://vorlon.io/saas-security-blog/author/lauren-lee) Blog tags - [Breach Response](https://vorlon.io/saas-security-blog/tag/breach-response) [![ShinyHunters Sidebar Ad](https://vorlon.io/hs-fs/hubfs/Images%20-%202026/2026%20CISO%20Report%20Banner%20Ad%20Final.png?width=350&height=520&name=2026%20CISO%20Report%20Banner%20Ad%20Final.png) ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLIFqhHbvMXr9sCtLg3SjGyxucXLDGAEZ6p7hVq%2FHj73J5jIl21ntspuXck0FDhLa5AoCVIiV6UPoFdmfyoCgk5gZhyQN0vNpJbQcKsyBPMqUuCsA79wUgKn%2BCq0jST2BYpRcl6MQO1nqRSUKrW04CR0pGt7umY8qquGOnnq3HJ0%2FYgVqp01i6ughr1Bd0ujJd4m2N8PUt6sJyfXCE46FwKHWOIg3dceObp%2BtoycGA%3D%3D&portalId=24426272) ### Related blogs [View all blogs](https://vorlon.io/blog) [![The Vercel Incident: OAuth Tokens and the AI Supply Chain Attack](https://vorlon.io/hs-fs/hubfs/vercel%20breach%20blog.png?width=400&height=300&name=vercel%20breach%20blog.png) Breach Response ### The Vercel Incident: OAuth Tokens and the AI Supply Chain Attack 7 min read Read More ](https://vorlon.io/saas-security-blog/vercel-incident-oauth-tokens-ai-supply-chain) [![Anodot Breach Exposes Snowflake Customer Data, Including Rockstar Games](https://vorlon.io/hs-fs/hubfs/anodot%20breach.png?width=400&height=300&name=anodot%20breach.png) Breach Response ### Anodot Breach Exposes Snowflake Customer Data, Including Rockstar Games 3 min read Read More ](https://vorlon.io/saas-security-blog/anodot-snowflake-breach-shinyhunters-data-theft) [![Mandiant Research on ShinyHunters Vishing: Why MFA-enabled Doesn’t Mean Protected](https://vorlon.io/hs-fs/hubfs/mandiant%20research%20shinyhunters%20vishing.png?width=400&height=300&name=mandiant%20research%20shinyhunters%20vishing.png) Breach Response ### Mandiant Research on ShinyHunters Vishing: Why MFA-enabled Doesn’t Mean Protected 5 min read Read More ](https://vorlon.io/saas-security-blog/mandiant-research-shinyhunters-vishing-mfa) [![How the Gainsight Breach Exposed a Growing SaaS Supply Chain Threat](https://vorlon.io/hs-fs/hubfs/Gainsight%20Breach.webp?width=400&height=300&name=Gainsight%20Breach.webp) Breach Response ### How the Gainsight Breach Exposed a Growing SaaS Supply Chain Threat 9 min read Read More ](https://vorlon.io/saas-security-blog/the-gainsight-breach-and-saas-supply-chain-attacks) ## Featured resources [![CISO Report Resource Tile](https://vorlon.io/hs-fs/hubfs/CISO%20Report%20Resource%20Tile.webp?width=1548&height=1046&name=CISO%20Report%20Resource%20Tile.webp) WHITE PAPERS AND RESEARCH ### The Agentic Ecosystem SecurityGap: 2026 CISO Report Why 99% of Organizations Were Breached Through Their SaaS and AI Ecosystem Despite Record Security Investment Read more ](https://go.vorlon.io/vorlon-2026-ciso-report-agentic-ecosystem-security-gap) [![blog 451 why saas and ai are converged (1)](https://vorlon.io/hs-fs/hubfs/Images%20-%202026/blog%20451%20why%20saas%20and%20ai%20are%20converged%20(1).png?width=329&height=222&name=blog%20451%20why%20saas%20and%20ai%20are%20converged%20(1).png) SaaS Security ### 451 Research: Why AI and SaaS Security Are Converging 451 Research highlights how AI and SaaS security are converging. Learn why integrations, OAuth, and ecosystem-level risk now define enterprise security. Read more ](https://vorlon.io/saas-security-blog/451-research-ai-saas-security-convergence) [![datamatrix patent blog](https://vorlon.io/hs-fs/hubfs/datamatrix%20patent%20blog.png?width=1548&height=1046&name=datamatrix%20patent%20blog.png) ### DataMatrix™: Vorlon's Patented Approach to Agentic Ecosystem Security Vorlon's DataMatrix™ technology is now patented. Learn how this intelligent simulation engine secures the agentic ecosystem by mapping AI agents, SaaS integrations, and data in motion. Read more ](https://vorlon.io/saas-security-blog/datamatrix-vorlons-patented-technology) ## Get Proactive Security for Your Agentic Ecosystem Book a Demo [![Vorlon_Logo_Large_White](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/Vorlon_Logo_Large_White.png?width=139&height=33&name=Vorlon_Logo_Large_White.png) ](https://vorlon.io) ## Sign up for industry insights and Vorlon news Start Here - [The Agentic Ecosystem Security Gap](https://vorlon.io/problems-we-solve) - [The Agentic Ecosystem Signal to Action Layer](https://vorlon.io/our-solution) Platform - [Platform](https://vorlon.io/platform) - [AI Agent Runtime Security](https://vorlon.io/ai-runtime-security) - [Total Identity Security](https://vorlon.io/total-identity-security) - [Data-Centric SaaS Security](https://vorlon.io/data-centric-saas-security) - [Compliance Automation](https://vorlon.io/compliance-automation) - [Apps Directory](https://vorlon.io/app-directory) - [SecOps Integrations](https://vorlon.io/integrations) Company - [About](https://vorlon.io/about) - [Careers](https://vorlon.io/careers) - [Press Room](https://vorlon.io/press-room) - [Resources](https://vorlon.io/resources) - [Blog](https://vorlon.io/blog) Let's Connect - Talk to Sales ![soc-type-2](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/soc-type-2.jpg?width=105&height=50&name=soc-type-2.jpg)![aws logo cropped](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/aws%20logo%20cropped.png?width=50&height=50&name=aws%20logo%20cropped.png)![latio innovators on black](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/latio%20innovators%20on%20black.png?width=52&height=50&name=latio%20innovators%20on%20black.png)![2025-CRN-Stellar-Startups](https://vorlon.io/hs-fs/hubfs/Logo/2025-CRN-Stellar-Startups.webp?width=29&height=50&name=2025-CRN-Stellar-Startups.webp)![FS-ISAC-Seal_Affiliate_onblack](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/FS-ISAC-Seal_Affiliate_onblack.png?width=156&height=50&name=FS-ISAC-Seal_Affiliate_onblack.png) © 2026 Vorlon Inc. All rights reserved. - [Terms of Use](https://vorlon.io/terms-of-use) - [Privacy Policy](https://vorlon.io/privacy-policy) - [Sitemap](https://vorlon.io/sitemap) [![ClickCease](https://monitor.clickcease.com/stats/stats.aspx)](https://www.clickcease.com) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lauren Lee", "url" : "https://vorlon.io/saas-security-blog/author/lauren-lee" }, "dateModified" : "2026-02-06T06:39:33.650Z", "datePublished" : "2023-11-03T07:00:00.000Z", "headline" : "Oops, Your Ancestors Have Been Hacked! A Closer Look at the 23andMe Data Breach | Vorlon Blog: Bite sized breaches", "image" : [ "https://vorlon.io/hubfs/Bite%20Sized%20Breaches%20(y).png" ], "mainEntityOfPage" : { "@id" : "https://vorlon.io/saas-security-blog/oops-your-ancestors-have-been-hacked-a-closer-look-at-the-23andme-data-breach", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://vorlon.io/hubfs/Logo/Vorlon%20logo_two%20tone%20light.svg" }, "name" : "Vorlon Inc." } } ```