As I’m sure you know, the accounts that got credential stuffed also exposed the information of anyone that had shared data with them.

What’s more is these hacked accounts were used to friend and solicit other 23&Me users to share their data, expanding the amount of data collected well beyond the scope of just the accounts that got hacked.

I’m sure the nearly 7 million people who had their info stolen through the breach of just 14k accounts weren’t all stupid.