Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Website Security Breach Exposes 1 Million DNA Profiles

A genealogy website used to catch one of California’s most wanted serial killers remained shut down Thursday after a security breach exposed the DNA profiles of more than a million people to law enforcement agencies.

A genealogy website used to catch one of California’s most wanted serial killers remained shut down Thursday after a security breach exposed the DNA profiles of more than a million people to law enforcement agencies.

GEDmatch said in a message emailed to members and posted Wednesday on its Facebook page that on Sunday a “sophisticated attack” on their servers through an existing user account made the DNA profiles of its members available for police to search for about three hours.

“We became aware of the situation a short time later and immediately took the site down,” GEDmatch said.

GEDmatch briefly resumed but shut down again after it was the target of a second breach on Monday when all user permissions were set to opt-in to law enforcement matching, the company said.

“We can assure you that your DNA information was not compromised, as GEDmatch does not store raw DNA files on the site,” the company said. “When you upload your data, the information is encoded and the raw file deleted. This is one of the ways we protect our users’ most sensitive information.”

The company said it was informed Tuesday that customers of MyHeritage, an Israel-based genealogy website, that are also GEDmatch users were the target of a phishing scam.

The site remained down on Thursday with a message reading “The gedmatch site is down for maintenance. Currently no ETA for availability.”

GEDmatch made headlines in 2018 when it helped investigators in California identify Joseph James DeAngelo, also known as the Golden State Killer. DeAngelo is suspected of being the sadistic attacker who killed 13 people and raped nearly 50 women in California during the ’70s and ’80s.

Advertisement. Scroll to continue reading.

DeAngelo last month pled guilty to dozens of crimes in return for being spared the death penalty.

As of 2019, than 1.2 million people have used GEDmatch’s free service to upload data profiles from different DNA testing companies such as Ancestry and 23andme, and compare their autosomal DNA data files with others, KPIX-TV reported.

The service has become a huge help for genealogists and people seeking to build their family trees by allowing one-to-one, one-to-many X-DNA comparisons and other useful matrices.

Related: Beauty and the Breach: Estée Lauder Exposes 440 Million Records in Unprotected Database

Related: Millions of Digital Wallets Exposed by Key Ring

Related: Unprotected Medical Systems Expose Data on Millions of Patients

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...