23AndMe Breach: Cost of Ignoring NIST Standards

Credential Stuffing: How 23andMe Got It Wrong

In 2023, 23andMe suffered a massive data breach that exposed the genetic and personal data of nearly 7 million users, all because of credential stuffing. Less than two years later, the company filed for bankruptcy.

What went wrong? And more importantly, how can your organization avoid the same fate?

In this 10-minute video, we break down:

• How weak password hygiene fueled the attack
• Where 23andMe failed to follow NIST password guidelines
• Actionable steps to prevent credential stuffing using modern defenses