<ul data-eligibleForWebStory="true">The UK watchdog, ICO, has fined 23andMe 2.31 million for failing to protect personal information following a 2023 data breach.Hackers accessed 23andMe user data in a cyberattack, affecting 0.1% of the customer base.Sensitive information like ancestry profiles was exposed due to the breach.The investigation found 'serious security failings' in 23andMe's actions post-breach.The company delayed initiating a full investigation post-cyberattack, confirming the breach only after data was advertised for sale.The breach exposed personal information, family histories, and health conditions of many UK users.Failure to protect the data left individuals vulnerable to exploitation and harm.The watchdog described the breach as profoundly damaging, impacting thousands of people in the UK.Affected individuals should remain cautious of unexpected communications following the breach.