Genetics testing company 23andMe facing investigation over data breach

10 June 2024, 21:24

Data. Picture: PA

The Information Commissioner’s Office and Office of the Privacy Commissioner of Canada have announced a joint investigation into the 2023 incident.

A joint investigation into a data breach at DNA testing company 23andMe has been launched by the UK and Canada data protection watchdogs.

The Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) announced the investigation into the October 2023 incident on Monday.

23andMe is a US-based genetics company that analyses its customers’ DNA through home saliva collection kits to provide insights on factors such as health and ancestry.

According to the company’s website, it has sold more than 12 million DNA testing kits since 2006.

The UK and Canadian data protection regulators said they will combine their expertise and resources to jointly conduct the investigation.

It will examine the scope of information exposed by the breach and potential harms to affected people, whether 23andMe had adequate safeguards to protect the information within its control and whether the company provided adequate notification about the breach to the two regulators and affected people.

The ICO said: “23andMe is a custodian of highly sensitive personal information, including genetic information which does not change over time.

“It can reveal information about an individual and their family members, including about their health, ethnicity, and biological relationships.

“This makes public trust in these services essential.”

UK Information Commissioner John Edwards said: “People need to trust that any organisation handling their most sensitive personal information has the appropriate security and safeguards in place.

“This data breach had an international impact, and we look forward to collaborating with our Canadian counterparts to ensure the personal information of people in the UK is protected.”

Privacy Commissioner of Canada Philippe Dufresne said: “In the wrong hands, an individual’s genetic information could be misused for surveillance or discrimination.

“Ensuring that personal information is adequately protected against attacks by malicious actors is an important focus for privacy authorities in Canada and around the world.”

In a statement, 23andMe said: “23andMe acknowledges the joint investigation announced by the Privacy Commissioner of Canada and the UK Information Commissioner today.

“We intend to cooperate with these regulators’ reasonable requests relating to the credential stuffing attack discovered in October 2023.”

By Press Association

More Technology News

See more More Technology News

The NCSC said the Andariel group has been compromising organisations around the world (PA)

North Korea-backed cyber group sought to steal nuclear secrets, NCSC says

Tanaiste Micheal Martin speaks to the media

Tanaiste: Fake ads about me originated in Russia

A broadband router

Now most complained-about broadband and landline provider – latest Ofcom figures

Revolut card on a table

Revolut secures UK banking licence after three-year wait

IT outages

CrowdStrike faces backlash over 10 dollar apology vouchers for IT outage

Charlie Nunn, the boss of Lloyds, wearing a suit and tie outisde a building

Lloyds boss says tech outages a ‘really important issue’ for bank

A woman using a mobile

Accessing GP services online could pose risk to patient safety, probe finds

Overhead view of a man using a laptop computer

AI could help two-thirds of workers with daily tasks, says study

A TikTok logo on a mobile phone screen alongside logos for other apps

TikTok fined £1.8m over failure to provide accurate information to Ofcom

A hand pressing on laptop keys

UK competition regulator signs AI agreement with EU and US counterparts

A woman using a mobile phone

Third of UK adults use mobile contactless payments at least every month

Businessman hand touching password login device screen, cyber security concept

Lawlessness ‘characterises’ pornography online, says MP in plea to reform laws

Hands on a computer keyboard

State threat law watchdog calls for greater transparency from tech giants

The Meta logo on the side of a building

Latest open source AI models ‘world’s largest and most capable’, says Meta

Pupils eating lunch

Data watchdog reprimands school over facial recognition for canteen payments

Elon Musk laughs

Elon Musk: Tesla will begin using humanoid robots next year