UK watchdog fines 23andMe for ‘profoundly damaging’ data breach

UK watchdog fines 23andMe for ‘profoundly damaging’ data breach

DNA testing firm 23andMe has been fined £2.31m by a UK watchdog over a data breach in 2023 which affected thousands of people.

The Information Commissioner’s Office (ICO) said the company – which has since filed for bankruptcy – failed to put adequate measures in place to secure sensitive user data prior to the incident.

“This was a profoundly damaging breach that exposed sensitive personal information, family histories, and even health conditions,” said Information Commissioner John Edwards.

23andMe is set to be sold to a new owner, TTAM Research Institute, which said it had “made several binding commitments to enhance protections for customer data and privacy.”