23andMe—UK ICO fined 23andMe £2.31 million for data breach failures
The UK Information Commissioner's Office fined 23andMe £2.31 million for failing to adequately protect UK customers' personal data in the 2023 data breach that exposed genetic and ancestry information.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Data Security | -against | primary | -1.00 |
| User Privacy | -against | primary | -1.00 |
| Overall incident score = | -0.295 | ||
Score = avg(topic contributions) × significance (medium ×1) × confidence (0.59)× agency (negligent ×0.5)
Evidence (1 signal)
Confirms Legal Action Jan 15, 2025 verified
UK ICO enforcement action page details £2.31M fine against 23andMe
The UK Information Commissioner's Office published its enforcement action against 23andMe, detailing the £2.31 million fine for failing to adequately protect UK customers' personal data in the 2023 data breach.