In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

They’re blaming customers for not having good cybersecurity practices instead of themselves for not having good cybersecurity practices.

    • starman2112@sh.itjust.works
      7·
      11 months ago

      The issue isn’t just reuse of passwords. Only about 14,000 accounts were breached because of bad passwords. The problem is that those 14k accounts allowed bad actors to access the personal information of nearly 7 million people. It’s less “you shouldn’t have reused your password,” it’s more “your neighbor’s cousin’s sister-in-law’s nephew shouldn’t have reused his password”

      • dream_weasel@sh.itjust.works
        21·
        11 months ago

        … And you should not opt in to sharing data with people whose security practices you don’t know.

        Don’t print your SSN and give it to your inlaws or your grandma. Or your credit card info or anything else.