Genetics testing company 23andMe facing investigation over data breach

10 June 2024, 21:24

Data
Data. Picture: PA

The Information Commissioner’s Office and Office of the Privacy Commissioner of Canada have announced a joint investigation into the 2023 incident.

A joint investigation into a data breach at DNA testing company 23andMe has been launched by the UK and Canada data protection watchdogs.

The Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) announced the investigation into the October 2023 incident on Monday.

23andMe is a US-based genetics company that analyses its customers’ DNA through home saliva collection kits to provide insights on factors such as health and ancestry.

According to the company’s website, it has sold more than 12 million DNA testing kits since 2006.

The UK and Canadian data protection regulators said they will combine their expertise and resources to jointly conduct the investigation.

It will examine the scope of information exposed by the breach and potential harms to affected people, whether 23andMe had adequate safeguards to protect the information within its control and whether the company provided adequate notification about the breach to the two regulators and affected people.

The ICO said: “23andMe is a custodian of highly sensitive personal information, including genetic information which does not change over time.

“It can reveal information about an individual and their family members, including about their health, ethnicity, and biological relationships.

“This makes public trust in these services essential.”

UK Information Commissioner John Edwards said: “People need to trust that any organisation handling their most sensitive personal information has the appropriate security and safeguards in place.

“This data breach had an international impact, and we look forward to collaborating with our Canadian counterparts to ensure the personal information of people in the UK is protected.”

Privacy Commissioner of Canada Philippe Dufresne said: “In the wrong hands, an individual’s genetic information could be misused for surveillance or discrimination.

“Ensuring that personal information is adequately protected against attacks by malicious actors is an important focus for privacy authorities in Canada and around the world.”

In a statement, 23andMe said: “23andMe acknowledges the joint investigation announced by the Privacy Commissioner of Canada and the UK Information Commissioner today.

“We intend to cooperate with these regulators’ reasonable requests relating to the credential stuffing attack discovered in October 2023.”

By Press Association

More Technology News

See more More Technology News

Elon Musk

How Elon Musk’s influence has grown both online and offline in 2024

Hands holding the iPhone 16

How smartphones powered the AI boom in 2024

London skyline

US investor to snap up maritime AI specialist Windward for £216m

Donald Trump

How will a second Trump presidency impact the tech world in 2025?

Morning drone (002)

Drone project reaches ‘important milestone’ with final trial flights

Prime Minister hosts Chanukah reception

AI tech giants should not be subsidised by British creatives, Starmer signals

Dr Craig Wright arrives at the Rolls Building in London for the trial earlier this year (Lucy North/PA)

Computer scientist behind false Bitcoin founder claim sentenced for contempt

Google has been contacted for comment (PA)

ICO criticises Google over ‘irresponsible’ advertising tracking change

Some 22% of consumers have increased their use of second-hand shopping apps in the past three months (Depop/PA)

Millions of Britons earning average £146 a month on second-hand platforms

ChatGPT being used via WhatsApp

ChatGPT joins WhatsApp to allow anyone to access the AI chatbot

A Facebook home page on a laptop screen

Meta fined more than 250 million euro by Irish data commission following breach

Finger poised above WhatsApp app on smartphone

Ending use of WhatsApp is ‘clear admission’ Government was wrong, claim Tories

Phone with WhatsApp on the screen

Scottish Government to cease use of WhatsApp by spring, says Forbes

Open AI

OpenAI rolls out ChatGPT search engine tool to all users

Most people happy to share health data to develop artificial intelligence

Government launches consultation on copyrighted material being used to train AI

Debbie Weinstein

Google names UK executive as president for Europe, Middle East and Africa