23andMe user data breached in credential-stuffing attack

Biotech company 23andMe , known for its DNA testing kits, confirmed to BleepingComputer that its user data is circulating on hacker forums. The company said the leak occurred through a credential-stuffing attack. A credential-stuffing attack involves user information that has already been compromised (usernames and passwords, for example) from one organization, which a hacker obtains and attempts to reuse with a second organization -- in this case, 23andMe. Because of the nature of credential-st...