23andMe tells victims it's their fault that their data was breached | TechCrunch
techcrunch.com
In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.
  • rdyoung@lemmy.worldEnglish
    2·
    11 months ago

    Just read the article and at least some of the breach is definitely on the end user. This is why we don’t recycle passwords and why everyone should be using the password manager of their choice. Each account gets a new password at least until passkeys are more widespread.

    • AquilaEnglish
      11·
      11 months ago

      That’s still on 23andme for not enforcing stricter password requirements

      • rdyoung@lemmy.worldEnglish
        2·
        11 months ago

        You can have the strictest requirements and people will still use that same password elsewhere. That’s where these credentials came from for the attack, leaks from other attacks.

        Yes, there is more that 23andMe should have done to mitigate an attack, but, this is also on the end user not being smarter about this.