What is the official website of 23andMe ?

The official website of 23andMe is https://www.23andme.com.

What is 23andMe's cybersecurity risk score?

23andMe has an AI-generated cybersecurity risk score of 100 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has 23andMe experienced?

According to Rankiteo, 23andMe currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has 23andMe been affected by any supply chain cyber incidents ?

According to Rankiteo, 23andMe has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: MyHeritage (Incident ID: 23A1780359968) Snowflake (Incident ID: 23A1764346412) MyHeritage (Incident ID: 23A0702607092625) 23andMe (Incident ID: 23A4433044101425) 23andMe (Incident ID: 23A4894348111825) 23andMe (Incident ID: 23A328072725) MyHeritage (Incident ID: 23A1784075183)

Does 23andMe have SOC 2 Type 1 certification ?

According to Rankiteo, 23andMe is not certified under SOC 2 Type 1.

Does 23andMe have SOC 2 Type 2 certification ?

According to Rankiteo, 23andMe does not hold a SOC 2 Type 2 certification.

Does 23andMe comply with GDPR ?

According to Rankiteo, 23andMe is not listed as GDPR compliant.

Does 23andMe have PCI DSS certification ?

According to Rankiteo, 23andMe does not currently maintain PCI DSS compliance.

Does 23andMe comply with HIPAA ?

According to Rankiteo, 23andMe is not compliant with HIPAA regulations.

Does 23andMe have ISO 27001 certification ?

According to Rankiteo,23andMe is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does 23andMe operate in ?

23andMe operates primarily in the Non-profit Organizations industry.

How many employees does 23andMe have ?

23andMe employs approximately 549 people worldwide.

Does 23andMe own any subsidiaries ?

23andMe presently has no subsidiaries across any sectors.

How many LinkedIn followers does 23andMe have ?

23andMe's official LinkedIn profile has approximately 82,401 followers.

What is the NAICS classification code for 23andMe ?

23andMe is classified under the NAICS code 8135, which corresponds to Others.

Does 23andMe have a Crunchbase profile ?

No, 23andMe does not have a profile on Crunchbase.

Does 23andMe have a LinkedIn profile ?

Yes, 23andMe maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/23andme.

How many cybersecurity incidents has 23andMe experienced ?

As of October 17, 2026, Rankiteo reports that 23andMe has experienced 10 cybersecurity incidents.

How many peer or competitor companies does 23andMe have ?

23andMe has an estimated 23,248 peer or competitor companies worldwide.

What types of cybersecurity incidents has 23andMe faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

23andMe

Boost Score +25 with badge (5 left)

100

/1000

Critical

125

/1000

Critical

23andMe Vendor Cyber Rating & Cyber Score

23andme.com

Add Your Compliance Badge

23andMe Research Institute is a nonprofit medical research organization that enables people everywhere to access their genetic information, learn about themselves and participate in the world's largest crowdsourced research initiative. The Institute aims to be the world's most significant contributor to scientific advancement, uniting people with the common goal of improving health and deepening our understanding of DNA — the code of life.

23andMe

23andMe CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

23andMe

Breach

100

6/2026

MyHeritage

23A1780359968

23andMe

Breach

5/2026

23A1784263022

23andMe

Breach

11/2025

Snowflake

23A1764346412

23andMe

Breach

9/2025

MyHeritage

23A070260709262...

23andMe

Breach

100

3/2025

23A000032525

23andMe

Breach

100

10/2023

23andMe

23A443304410142...

23andMe

Breach

6/2023

23andMe

23A489434811182...

23andMe

Breach

6/2023

23A1768948228

23andMe

Breach

4/2023

23andMe

23A328072725

23andMe

Breach

12/2021

MyHeritage

23A1784075183

Loading…

A.I.

23andMe Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for 23andMe

Incidents vs Non-profit Organizations Industry Avg (This Year)

23andMe has 14.94% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

23andMe has 96.08% more incidents than the average of all companies with at least one recorded incident.

Incident Types 23andMe vs Non-profit Organizations Industry Avg (This Year)

23andMe reported 2 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 2 data breaches, compared to industry peers with at least 1 incident.

Incident History - 23andMe (X = Date, Y = Severity)

Loading…

SUBSIDIARY

23andMe Subsidiaries

Parent Company

23andMe

Non-profit Organizations

Website: https://www.23andme.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

23andMe Similar Companies

International Committee of the Red Cross - ICRC

icrc.org

Established in 1863, the International Committee of the Red Cross (ICRC) works worldwide to provide humanitarian help for people affected by conflict and armed violence and to promote the laws that protect victims of war. An independent and neutral organization, its mandate stems essentially from the Geneva Conventions of 1949. It takes action in response to emergencies and promotes respect for international humanitarian law and its implementation in national law. We work closely with National Red Cross and Red Crescent Societies and with their International Federation to ensure a concerted, rational and rapid humanitarian response to the needs of the victims of armed conflict or any other situation of internal violence. Find out more about the ICRC by visiting the following links: Where we work http://www.icrc.org/en/where-we-work Working for the ICRC https://careers.icrc.org/ https://www.icrc.org/en/join-icrc-and-help-protect-lives-and-dignity Current Opportunities https://bit.ly/2GuHdZR

YMCA of the USA

ymca.org

YMCA of the USA is the national resource office for the nation's YMCAs. Located in Chicago, IL, YMCA of the USA exists to serve YMCAs. To address the specific needs of communities, each YMCA is an independent organization, autonomous and separate from YMCA of the USA. They are required by the national constitution to pay annual dues, to refrain from discrimination and to support the YMCA mission. All other decisions are local choices, including programs offered, staffing and style of operation. Learn, Grow and Thrive with a Career at the Y Imagine going to work knowing that what you do each day positively affects the lives of the people in your community. Working at the Y, you'll discover more than a job-you'll enjoy a career with a future and the opportunity to make a lasting difference in the lives of those around you. Our staff members-of all ages and backgrounds and life experiences-enjoy the personal satisfaction that comes from nurturing the potential of youth and teens, improving the nation's health and well-being and providing support to our neighbors. The Y ensures that everyone has the opportunity to become healthier, more confident, connected and secure. Search for open positions at Ys across the U.S.: https://www.ymca.org/get-involved/careers/opportunities/open-positions

UNICEF

unicef.org

UNICEF works in some of the world’s toughest places, to reach the world’s most disadvantaged children. To save their lives. To defend their rights. To help them fulfill their potential. Across 190 countries and territories, we work for every child, everywhere, every day, to build a better world for everyone. And we never give up.

World Vision

wvi.org

World Vision is the largest child-focused private charity in the world. Our 33,000+ staff members working in nearly 100 countries have united with our incredible supporters to impact the lives of over 200 million vulnerable children by tackling the root causes of poverty. Through World Vision every 60 seconds…a family gets water…a hungry child is fed…a family receives the tools to overcome poverty. Motivated by our faith and guided by our deep experience and expertise, we are a Christian humanitarian, development and advocacy organisation devoted to improving the lives of children, families and their communities around the world and creating lasting impact that will live on in generations to come. We serve all people, regardless of religion, race, ethnicity, or gender.

Transport for London

tfl.gov.uk

Every day, we help millions of people to make journeys across London: By Tube, bus, tram, car, bike – and more. People don’t associate us with journeys by river, on foot or via the air, but we help with that, too. Getting people to where they need to go has been our business for over 100 years, and it shows. We’re leaders in our field, and no other city’s transport system is quite as recognisable: Red buses, black taxis, Tube trains and roundels have become icons in their own right. Our main job is to keep the city moving, working and growing but to do that, we have to listen. Constant improvements across the network are fuelled by feedback and comments from customers, as well as work within communities, representative groups, businesses and other London transport stakeholders. But our progress also depends on technology and data. With the future at our fingertips, we’ve already used it to revolutionise travel payments (think Oyster and contactless payment cards), and improved travel information. Tech and data is essential, not just to our future, but to others’: third parties use our data to power apps and services vital to customer journeys. So what’s next? As well as continuing to deliver Mayor of London, Sadiq Khan’s strategy and commitments on transport, our programme of capital investments is still one of the largest. We launched the Elizabeth line, we’re modernising services and stations and making travel safer for all.

IEEE

cb ieee.org

IEEE is the world’s largest technical professional organization and is a public charity dedicated to advancing technological innovation and excellence for the benefit of humanity. IEEE and its members inspire a global community through its highly cited publications, conferences, technology standards, and professional and educational activities. IEEE is the trusted “voice” for engineering, computing and technology information around the globe. For information about the IEEE - visit http://www.ieee.org.

Boys & Girls Clubs of America

bgca.org

Boys & Girls Clubs of America does whatever it takes for America’s youth to have great futures. As the nation's premier (nonprofit) youth development organization, our programs, training and services support millions of kids and teens every year. We hire employees who are recognized as leaders in their field with a passion for improving young lives. We have strong values, embrace diversity and offer great benefits to allow our employees to maintain work/life harmony. Boys & Girls Clubs of America represents the national office, which supports more than 1,000 independent Boys & Girls Club organizations serving youth across more than 5,400 locations. Boys & Girls Clubs are located in cities, towns, public housing and on Native lands throughout the country, and serve military families in BGCA-affiliated Youth Centers on U.S. military installations worldwide. Learn more about us at BGCA.org. Our Mission To enable all young people, especially those who need us most, to reach their full potential as productive, caring, responsible citizens. Our Values Integrity Collaboration Accountability Respect Excellence

Colsubsidio

colsubsidio.com

Colsubsidio es una empresa privada sin ánimo de lucro que hace parte del Sistema de Protección y Seguridad Social en Colombia. Entendemos a las personas como seres integrales, con necesidades diversas y en constante transformación. Por eso, trabajamos para construir oportunidades a través de servicios en salud, educación, recreación, empleo, vivienda y subsidios. Creemos en el talento como motor del país y trabajamos para atraer y acompañar a quienes buscan construir una carrera con propósito. Haz parte de una de las empresas más relevantes, estables y en crecimiento del país. 🌐 Conoce más de nuestra labor : Facebook: https://www.facebook.com/ColsubsidioInfo YouTube: https://www.youtube.com/c/ColsubsidioInfo X (Twitter): https://twitter.com/Colsubsidio_Ofi

American Red Cross

cb redcross.org

The American Red Cross prevents and alleviates human suffering in the face of emergencies by mobilizing the power of volunteers and the generosity of donors. Each day, thousands of people – people just like you – provide compassionate care to those in need. Our network of generous donors, volunteers and employees share a mission of preventing and relieving suffering, here at home and around the world. We roll up our sleeves and donate time, money and blood. We learn or teach life-saving skills so our communities can be better prepared when the need arises. We do this every day because the Red Cross is needed - every day.

Loading…

NEWS

23andMe CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 04, 2026 08:00 AM

23andMe settlement approved in class-action lawsuit. Here's how to file a claim before deadline

Final approval of 23andMe's settlement was granted on Jan. 30, as the deadline for customers to file a claim approaches.

Read Article

January 05, 2026 08:00 AM

From Genes to Hackers: The Hidden Cybersecurity Risks in Life Sciences

Getting a new credit card number is relatively easy, but you can't get a new genome. In October 2023, 23andMe experienced a data breach...

Read Article

October 23, 2025 07:00 AM

23andMe’s Data-Theft Victims Offered ‘Genetic Monitoring’ to Ward Off Hackers

A trove of the bankrupt company's DNA profiles on millions of users is up for sale on the darknet.

Read Article

September 17, 2025 07:00 AM

23andMe Requests Bankruptcy Judge Approve Revised $50 Million Data Breach Settlement

23andMe has proposed an increased settlement fund to resolve U.S. litigation over its 2023 data breach, adding a further $20 million to the...

Read Article

July 17, 2025 07:00 AM

Privacy, Consent, and National Security After the 23andMe Bankruptcy

The sale of 23andMe's DNA database underscores the need to ban the transaction of Americans' genetic data as a corporate asset.

Read Article

July 14, 2025 07:00 AM

23andMe users have until today to file a claim in the DNA company's bankruptcy case. Here's how to do it.

Today is the deadline for 23andMe customers to submit a claim for compensation, if eligible.

Read Article

July 14, 2025 07:00 AM

Today is your last chance to file a claim with 23andMe for your genetic data in 2023

July 14 at 11:59 p.m. CT is your last chance to file a claim with 23andMe for a 2023 data breach that may have compromised your genetic...

Read Article

July 13, 2025 07:00 AM

23andMe data breach: Deadline looms for customers seeking compensation

A 2023 cyberattack compromised the sensitive personal information of nearly 7 million customers.

Read Article

July 11, 2025 07:00 AM

23andMe users have until this date to file a claim in bankruptcy case: Here’s how to do it

If you have a 23andMe account, you have until July 14 to file a claim as part of the restructuring in its bankruptcy case.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-89096

SUMMARY

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.

Published

Date2026-10-16

Updated

Date2026-10-16

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-89088

SUMMARY

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).

Published

Date2026-10-16

Updated

Date2026-10-16

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.8

REFERENCES

CVE-2026-89085

SUMMARY

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.

Published

Date2026-10-16

Updated

Date2026-10-16

RISK INFORMATION (Score: 6.6)

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

1.8

REFERENCES

CVE-2026-17591

SUMMARY

A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.

Published

Date2026-10-16

Updated

Date2026-10-16

RISK INFORMATION (Score: 3.6)

cvss3

Base Score: 3.6

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

Impact Score

2.5

Exploitability

REFERENCES

CVE-2026-111802

SUMMARY

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Published

Date2026-10-16

Updated

Date2026-10-16

RISK INFORMATION (Score: 6.6)

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

1.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

23andMe Vendor Cyber Rating & Cyber Score

23andMe A.I CyberSecurity Scoring

23andMe CyberSecurity News & History

23andMe Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for 23andMe

Incidents vs Non-profit Organizations Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types 23andMe vs Non-profit Organizations Industry Avg (This Year)

Incident History - 23andMe (X = Date, Y = Severity)

23andMe Subsidiaries

Parent Company

23andMe

23andMe Similar Companies

International Committee of the Red Cross - ICRC

YMCA of the USA

UNICEF

World Vision

Transport for London

IEEE

Boys & Girls Clubs of America

Colsubsidio

American Red Cross

23andMe CyberSecurity News

23andMe settlement approved in class-action lawsuit. Here's how to file a claim before deadline

From Genes to Hackers: The Hidden Cybersecurity Risks in Life Sciences

23andMe’s Data-Theft Victims Offered ‘Genetic Monitoring’ to Ward Off Hackers

23andMe Requests Bankruptcy Judge Approve Revised $50 Million Data Breach Settlement

Privacy, Consent, and National Security After the 23andMe Bankruptcy

23andMe users have until today to file a claim in the DNA company's bankruptcy case. Here's how to do it.

Today is your last chance to file a claim with 23andMe for your genetic data in 2023

23andMe data breach: Deadline looms for customers seeking compensation

23andMe users have until this date to file a claim in bankruptcy case: Here’s how to do it

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

23andMe CyberSecurity News & History

23andMe Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for 23andMe

Incidents vs Non-profit Organizations Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types 23andMe vs Non-profit Organizations Industry Avg (This Year)

Incident History - 23andMe (X = Date, Y = Severity)

23andMe Subsidiaries

Parent Company

23andMe

23andMe Similar Companies

International Committee of the Red Cross - ICRC

YMCA of the USA

UNICEF

World Vision

Transport for London

IEEE

Boys & Girls Clubs of America

Colsubsidio

American Red Cross

23andMe CyberSecurity News

23andMe settlement approved in class-action lawsuit. Here's how to file a claim before deadline

From Genes to Hackers: The Hidden Cybersecurity Risks in Life Sciences

23andMe’s Data-Theft Victims Offered ‘Genetic Monitoring’ to Ward Off Hackers

23andMe Requests Bankruptcy Judge Approve Revised $50 Million Data Breach Settlement

Privacy, Consent, and National Security After the 23andMe Bankruptcy

23andMe users have until today to file a claim in the DNA company's bankruptcy case. Here's how to do it.

Today is your last chance to file a claim with 23andMe for your genetic data in 2023

23andMe data breach: Deadline looms for customers seeking compensation

23andMe users have until this date to file a claim in bankruptcy case: Here’s how to do it

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?