It has now been confirmed that an additional 6.9 million 23andMe users had ancestry data stolen after hackers accessed thousands of accounts by likely reusing previously leaked passwords.
23andMe previously disclosed in a Securities and Exchange Commission filing that 0.1 percent of users—approximately 14,000, TechCrunch estimated—had accounts accessed by hackers using compromised passwords.
After the cyberattack was reported, Wired estimated that “at least a million data points from 23andMe accounts” that were “exclusively about Ashkenazi Jews” and data points from “hundreds of thousands of users of Chinese descent” seemed to be exposed.
