In a letter to victims who filed a lawsuit against the company, 23andMe blames its breach on customers for reusing passwords.

Hope this isn’t a repeated submission. Funny how they’re trying to deflect blame after they tried to change the EULA post breach.

  • Umbraveil@lemmy.worldEnglish
    221·
    10 months ago

    IP-based mitigation strategies are pretty useless for ATO and credential stuffing attacks.

    These days, bot nets for hire are easy to come by and you can rotate your IP on every request limiting you controls to simply block known bad IPs and data server IPs.