Genomics Company Data Breach Investigated

The data commissioner in the UK has launched an investigation with its Canadian counterpart into a 2023 hack of “highly sensitive information” held by the gene testing company, 23 and Me. The biotech company is headquartered in San Francisco and markets its testing kits worldwide, inviting consumers to discover their ancestry and genetic traits by providing a saliva sample in the post. In October 2023, the company said that hackers had obtained the highly personal information of around seven million of its customers and had attempted to sell it on the dark web. The Information Commissioner’s Office said in a statement: “23andMe is a custodian of highly sensitive personal information, including genetic information which does not change over time. It can reveal information about an individual and their family members, including about their health, ethnicity, and biological relationships. This makes public trust in these services essential.”...