--- title: 23andMe Data Breach: Company Shifts Blame onto Users description: DNA testing company 23andMe blames users for a data breach resulting in the theft of 6.9 million user records. Experts argue that both users and service... canonical: https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: 23andMe Data Breach: Company Shifts Blame onto Users | daily.dev og:description: DNA testing company 23andMe blames users for a data breach resulting in the theft of 6.9 million user records. Experts argue that both users and service... og:url: https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat og:image: https://api.daily.dev/og/posts/G6IJTkOAt.png og:image:alt: 23andMe Data Breach: Company Shifts Blame onto Users og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 23andMe Data Breach: Company Shifts Blame onto Users **[Collections](https://daily.dev/sources/collections)** · 2 min read · 2 upvotes · 0 comments ## Summary DNA testing company 23andMe blames users for a data breach resulting in the theft of 6.9 million user records. Experts argue that both users and service providers have a shared responsibility for cybersecurity. ## Content In a recent data breach, DNA testing company 23andMe is pointing fingers at its users, claiming that they were negligent with their passwords and therefore share responsibility for the incident. The breach resulted in the theft of 6.9 million user records, leading to legal action under the California Privacy Rights Act (CRPA). While 23andMe asserts that the stolen data cannot cause harm, experts argue that any type of data breach can have consequences, even without traditional personal identification information. The company defends itself by citing security remediations it implemented after the breach. However, critics argue that placing the blame solely on users oversimplifies cybersecurity and neglects the company's responsibility to protect user information. Furthermore, they emphasize that the question of responsibility in credential stuffing is a broader issue affecting numerous organizations. Both users and service providers, like 23andMe, should take measures to enhance security. While users must exercise caution and avoid reusing passwords, service providers have a responsibility to implement robust security measures. Experts argue that there should be a minimum requirement for customer portal security to mitigate the risk of data breaches. By addressing this shared responsibility, organizations and individuals can work together to prevent such incidents in the future. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#privacy](https://daily.dev/tags/privacy), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"23andMe Data Breach: Company Shifts Blame onto Users","url":"https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat"},"datePublished":"2024-01-04T14:24:01.701Z","dateModified":"2024-01-05T21:02:37.637Z","description":"DNA testing company 23andMe blames users for a data breach resulting in the theft of 6.9 million user records. Experts argue that both users and service...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bf1278f633107ca5eb3e39bfff627387?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bf1278f633107ca5eb3e39bfff627387?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/23andme-data-breach-company-shifts-blame-onto-users-g6ijtkoat","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,privacy,data-breach","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"23andMe Data Breach: Company Shifts Blame onto Users"}]} ```