23965 shaares
Credential stuffing did 23andMe in. Unclear what their password requirements were. No MFA.
Many victims were never credential-stuffed.
Many victims were never credential-stuffed.