Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

Spain's data regulator fined 23andMe €2.4 million for cybersecurity failings that enabled a 2023 credential stuffing breach affecting 6.9 million users, citing missing multifactor authentication, inadequate IP-based access controls, and delayed breach notification as GDPR violations.

This Wire brief sits within Fusion42's coverage of Digital Health. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.