23andMe confirms credential-stuffing breach affecting millions

23andMe attributed a large data exposure to credential stuffing against accounts that reused passwords and lacked MFA, later leading to settlements.