In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

They’re blaming customers for not having good cybersecurity practices instead of themselves for not having good cybersecurity practices.

  • brbposting@sh.itjust.works
    2·
    11 months ago

    Shouldn’t service providers be hashing the plaintext passwords that show up in dark web leaks to see if matching users reused those passwords?

    • folkrav@lemmy.ca
      4·
      11 months ago

      Wouldn’t really be of any use if they’re doing things right and salt their hashes