23andMe Confirms User Data Compromised in Credential Stuffing Attack, No Evidence of Direct Breach

Hackers accessed 23andMe user accounts by reusing stolen credentials from other breaches.
The compromised accounts contained personal information, health data, photos and genetic ancestry details.
andMe stated that while individual accounts were accessed, their systems were not directly breached.
The hack targeted Ashkenazi Jews initially but later expanded to include Chinese descent users.
The full extent of the breach remains unclear as 23andMe continues its investigation.