this post was submitted on 03 Jan 2024
777 points (94.0% liked)

Technology

60123 readers
2841 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
L4s@lemmy.world
L3s@fry.gs
L4s@fry.gs
enu@lemmy.world
777
23andMe tells victims it's their fault that their data was breached | TechCrunch (techcrunch.com)
submitted 11 months ago by Eezyville@sh.itjust.works to c/technology@lemmy.world
246 comments fedilink hide all child comments
 

Hope this isn't a repeated submission. Funny how they're trying to deflect blame after they tried to change the EULA post breach.

you are viewing a single comment's thread
view the rest of the comments
[–] KingThrillgore@lemmy.ml 46 points 11 months ago (1 children)

Blaming your customers is definitely a strategy. It's not a good one, but it is a strategy.

BRB deleting my 23AndMe account

[–] Rodeo@lemmy.ca 10 points 11 months ago (2 children)

As if deleting your account deletes your data.

[–] Ignisnex@lemmy.world 2 points 11 months ago (1 children)

UPDATE user_data SET deleted = 1 WHERE ID = you.

Done. Data deleted. All gone forever. Definitely doesn't just hide it from the user.

[–] _dev_null@lemmy.zxcvn.xyz 1 points 11 months ago

You should parameterize that query before Little Bobby enrolls.

[–] fruitycoder@sh.itjust.works 1 points 11 months ago (1 children)

Surely they have a GDPR-compliant way to have your info removed. Right?

[–] Rodeo@lemmy.ca 2 points 11 months ago

They're an American company, and I'm not yet aware of any lawsuits setting the precedent of the GDPR applying to server infrastructure in the USA, which is outside the jurisdiction of the GDPR.

So if they've copied your data to their American servers already (you can bet they have), it's there for good.