CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 2958

As cited

Copy frozen at (site build).

breaches incidents

Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

Spain's data protection authority fined 23andMe approximately 2.9 million euros for security failures that enabled a 2023 breach impacting 6.9 million users globally, with over 2,600 Spanish residents affected. The penalty reflects regulatory enforcement against inadequate safeguards that allowed unauthorized access to personal genetic data.

Why it matters: DNA testing companies and healthcare organizations must strengthen authentication and access controls to avoid similar AEPD fines; this case establishes enforcement precedent for biometric data breaches in the EU.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary