Hope this isn't a repeated submission. Funny how they're trying to deflect blame after they tried to change the EULA post breach.

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 years ago (1 child)

Users used bad passwords. Their accounts where accessed using their legitimate, bad, passwords.

Just as an anecdotal counterpoint, I am a 23andMe customer who did receive notification of my account was accessed and personal information obtained.

This was my password at the time: 7Kk5bXjIdfB25

That password was auto-generated for me by the BitWarden app.

So for what it's worth I don't think my password was a 'bad' password.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 years ago

    Your direct account was accessed or some of your information was access through a compromised account? those are big differences and from what I've read only the latter should have been possible. and in my opinion, not such a big deal.

  • source
  • parent