The UK data regulator's £2.31m fine issued to gene testing company 23andMe has been described by one industry commentator as "substantial but justified" due to the firm's breach of "the most basic security practices". This week, the Information Commissioner's Office (ICO) issued 23andMe, known for its popular personal DNA history tests, a fine for failing to implement appropriate security measures to protect the personal information of UK users. The concerns from the watchdog followed a high-profile cyber-attack against the company in 2023 that saw criminals steal the profiles and ethnic information of millions of primarily Ashkenazi Jewish users. More than 150,000 UK residents were among those whose genetic data was breached, with information including names, birth years, postcodes, health reports and ethnic background data accessed.