---
title: 23AndMe Breach
description: Learn how the 23andMe breach happened and how NIST-based password policies can prevent credential stuffing attacks.
---

[Skip to main content](https://resources.enzoic.com/23andme-breach/#main-content)

[![Placeholder Alt Text](https://resources.enzoic.com/hubfs/raw_assets/public/Enzoic_Flex_Templates/images/enzoic-logo-color.svg)](https://www.enzoic.com/)

[Active Directory](https://www.enzoic.com/active-directory-password-monitoring/) [Account Takeover](https://www.enzoic.com/ato-protection/) [Resources](https://www.enzoic.com/resource-hub/)

[Free Trial](https://enzoic.com/try-now)

![www.enzoic.comwp-contentuploads20250623andMe-1](https://resources.enzoic.com/hs-fs/hubfs/social-suggested-images/www.enzoic.comwp-contentuploads20250623andMe-1.jpg?width=1280&height=720&name=www.enzoic.comwp-contentuploads20250623andMe-1.jpg "www.enzoic.comwp-contentuploads20250623andMe-1")

WEBCAST

# 23AndMe Breach: Cost of Ignoring NIST Standards

**[Watch Now](https://youtu.be/DyDG1alWMKc)**

**Credential Stuffing: How 23andMe Got It Wrong**

In 2023, 23andMe suffered a massive data breach that exposed the genetic and personal data of nearly 7 million users, all because of credential stuffing. Less than two years later, the company filed for bankruptcy.

What went wrong? And more importantly, how can your organization avoid the same fate?

In this [10-minute video](https://youtu.be/DyDG1alWMKc), we break down:

- How weak password hygiene fueled the attack
- Where 23andMe failed to follow NIST password guidelines
- Actionable steps to prevent credential stuffing using modern defenses

[![Enzoic](https://resources.enzoic.com/hubfs/raw_assets/public/Enzoic_Flex_Templates/images/enzoic-logo-color.svg)](https://www.enzoic.com/)

---

© 2026 Enzoic. All Rights Reserved. PO Box 20896 | Boulder, CO 80308

[Privacy Policy](https://www.enzoic.com/privacy-policy/) • [Acceptable Use](https://www.enzoic.com/acceptable-use/)