The genetic testing company 23andMe is being fined £2.31m by the UK’s privacy watchdog over their 2023 data breach that saw the personal information of seven million people stolen.A database shared on dark web forums contained a list of 999,999 people who allegedly had Ashkenazi Jewish heritage, according to 23andMe’s genetic profiling.Despite the attack starting in April 2023, 23andMe did not open an investigation until October that year, when an employee discovered the stolen data had been advertised for sale on Reddit. What should be the punishment against data breach ?

