In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • Duamerthrax@lemmy.worldEnglish
    3312·
    10 months ago

    They’re right. It the customer’s fault for giving them the data in the first place.

    • lagomorphlecture@lemm.eeEnglish
      181·
      10 months ago

      But hear me out, I have no control over my cousin or aunt or some random relative getting one of these tests and now this shitty company has a pretty good idea what a large chunk of my DNA looks like. If people from both sides of my family do it they have an even better idea what my genetic profile looks like. That’s not my fault, I never consented to it, and it doesn’t seem ok.

    • Buffaloaf@lemmy.worldEnglish
      11·
      10 months ago

      If your credit card information gets stolen because someone stole it from a website you bought something off of, is that your fault?

      • Duamerthrax@lemmy.worldEnglish
        95·
        10 months ago

        I can change my credit card. I can’t change my dna. This wasn’t even for any medical reasons. 23andme is just a vanity service.

        • Buffaloaf@lemmy.worldEnglish
          6·
          10 months ago

          And what of the money lost? Should the credit card company say “well you’re an idiot that gave sensitive information to some company, we’re not going to help you?” It’s still victim blaming.

          • Duamerthrax@lemmy.worldEnglish
            12·
            10 months ago

            In reality, yes. If the data breach because users were reusing passwords, then they are partially at fault. If someone gets rear ended by a drunk driver and their injuries could have been limited by by wearing a seatbelt, then yes. They are partially at fault for it. People who don’t wear their seatbelts are the same types that reuse passwords. They don’t think it will happen to them and take their luck up to that point for granted.

      • spacesatan@lemm.eeEnglish
        22·
        10 months ago

        Bad analogy. The only people who had their information exposed are people who reused passwords and people who decided to make their info semi-public. It’s more like deciding to tell all your cousins and 2nd cousins your credit card info and one of them leaked it.

        • asret@lemmy.zipEnglish
          21·
          10 months ago

          And then trying to hold the card issuer liable rather than your cousin…

      • Duamerthrax@lemmy.worldEnglish
        13·
        10 months ago

        They became a victim the moment they gave their data to that company. Why is anyone that works at 23andme more trust worthy then rando hackers? They aren’t obligated to any HIPPA laws.

    • JIMMERZ@lemm.eeEnglish
      36·
      10 months ago

      Absolutely; and this is another example in a long list which should serve as a lesson for people to not share their personal data with any company if possible. Yet, I feel that lesson will never be learned.