The company said that attackers guessed certain users’ login credentials and then scraped other people’s information from an opt-in feature called DNA Relatives.
Days before 23andMe’s announcement, online threat actors touted a purported sample of 23andMe user data allegedly containing data elements for 1 million people with Ashkenazi Jewish heritage.