23andMe admits hackers stole raw genotype data - and that cyberattack went undetected for months | Firm says it didn’t realize customers were being hacked::Firm says it didn’t realize customers were being hacked

  • A Phlaming Phoenix
    link
    fedilink
    English
    115 months ago

    Do we know they delete the data when you do that? A lot of software is designed to “soft delete” data, where you mark the record with a “deleted” flag that excludes it from future queries. This data still lingers in the database and would still be accessible by anyone who can bypass the application logic, such as someone with a direct DB connection and read privileges.

    • @[email protected]
      link
      fedilink
      English
      55 months ago

      and let’s not forget that it was stolen, so it’s probably being sold right now anyway.

    • @[email protected]
      link
      fedilink
      English
      15 months ago

      They say that they do, so I’ll be getting a juicy $5 class action check if that was a lie. Most companies that implimented GDPR didn’t do a lot of if eu actually delete type code. The cost of determining EU citizenship incorrectly is pretty high.