If You Used 23andMe DNA Testing, Your Information May Have Been Exposed in Data Breach

23andMe, the popular DNA testing company, reached an $18 million settlement with 42 states over a massive data breach. The settlement comes after cybersecurity failures at the company allowed hackers to access customer information.

This breach affected people who submitted their DNA for testing to learn about their ancestry or health. If you or anyone in your family has ever used 23andMe to take a DNA test, your personal information may have been exposed in this breach. The settlement with state attorneys general shows that the company did not do enough to protect your data. Your account information and possibly genetic data could have been accessed by unauthorized people.

Here is what you need to do immediately:

1. Go to 23andMe.com and log into your account. Change your password right away. Make it strong and unique. Do not use the same password you use anywhere else.
2. Turn on two-factor authentication in your account settings. This adds an extra layer of security.
3. Check your email for any notifications from 23andMe about the breach. Look for instructions they may have sent about protecting your account.
4. Monitor your email and financial accounts for suspicious activity over the next several months.
5. If you no longer use 23andMe, consider deleting your account and requesting they destroy your genetic data. This breach highlights the special risks of sharing genetic information online. DNA data is permanent and cannot be changed like a password. Before using any genetic testing service, research their security practices. Always use strong, unique passwords and two-factor authentication for accounts containing sensitive personal information. Consider carefully whether the benefits of genetic testing outweigh the privacy risks for your family.