Comment on 23andMe tells victims it's their fault that their data was breached | TechCrunch

<- View Parent
Hegar@kbin.social ⁨10⁩ ⁨months⁩ ago

It's at least 99.8% the company's fault.

Even if we blame those 14k password reusers, being able to access genetic information and names of 6.9 million people after credential stuffing 0.02% of that is the fault of the company. They structured that access and failed to act on the obvious threat it represents.

But why blame password reusers? Not every grandparent interested in their family tree is capable of even understanding data security, let alone juggling multiple passwords or a PW manager.

Credential stuffing is an inevitable part of security landscape - especially for one time use accounts like genetics sites. A multimillion dollar IT department is just clearly responsible for preventing egregious data security failures.

source
Sort:hotnewtop