23andMe, a genetic testing company, is facing a lawsuit for allegedly failing to protect customers’ privacy following a data breach last year. The breach affected nearly seven million customer profiles and exposed personal genetic information on the dark web. The company discovered the breach on Oct. 1 after a hacker claimed to have customer data and shared a sample as proof. The breach included access to customers’ DNA profiles, which contain sensitive information. The lawsuit alleges that 23andMe failed to notify affected customers promptly and adequately. It claims that the sensitive nature of the breached data is a cause for concern, given the potential for widespread physical harassment. Representatives for the plaintiffs argue that the breach poses significant risks to users, particularly in light of geopolitical and social tensions. They are seeking both compensatory and punitive damages.
