{"id":79601,"date":"2018-06-14T02:02:20","date_gmt":"2018-06-14T09:02:20","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2018\/06\/why-a-dna-data-breach-is-much-worse-than-a-credit-card-leak"},"modified":"2018-06-14T02:02:20","modified_gmt":"2018-06-14T09:02:20","slug":"why-a-dna-data-breach-is-much-worse-than-a-credit-card-leak","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2018\/06\/why-a-dna-data-breach-is-much-worse-than-a-credit-card-leak","title":{"rendered":"Why a DNA data breach is much worse than a credit card leak"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/why-a-dna-data-breach-is-much-worse-than-a-credit-card-leak.jpg\"><\/a><\/p>\n<p>As the Equifax hack last year showed, there\u2019s a lack of legislation governing what happens to data from a breach. And ultimately, a breach of genetic data is much more serious than most credit breaches. Genetic information is immutable: Vigna points out that it\u2019s possible to change credit card numbers or even addresses, but genetic information cannot be changed. And genetic information is often shared involuntarily. \u201cEven if I don\u2019t use 23andMe, I have cousins who did, so effectively I may be genetically searchable,\u201d says Ram. In one case, an identical twin having her genetic data sequenced created a tricky situation for her sister.<\/p>\n<hr>\n<p>This week, DNA testing service MyHeritage revealed that <a href=\"https:\/\/www.theverge.com\/2018\/6\/5\/17430146\/dna-myheritage-ancestry-accounts-compromised-hack-breach\">hackers had breached 92 million of its accounts<\/a>. Though the hackers only accessed encrypted emails and passwords \u2014 so they never reached the actual genetic data \u2014 there\u2019s no question that this type of hack will happen more frequently as <a href=\"https:\/\/www.technologyreview.com\/s\/610233\/2017-was-the-year-consumer-dna-testing-blew-up\/\">consumer genetic testing becomes more and more popular<\/a>. So why would hackers want DNA information specifically? And what are the implications of a big DNA breach?<\/p>\n<p>One simple reason is that hackers might want to sell DNA data back for ransom, says <a href=\"https:\/\/www.cs.ucsb.edu\/~vigna\/\">Giovanni Vigna<\/a>, a professor of computer science at UC Santa Barbara and co-founder of cybersecurity company <a href=\"https:\/\/www.lastline.com\/\">Lastline<\/a>. Hackers could threaten to revoke access or post the sensitive information online if not given money; one Indiana hospital <a href=\"https:\/\/www.helpnetsecurity.com\/2018\/01\/17\/hospital-ransomware\/\">paid $55,000 to hackers for this very reason<\/a>. But there are reasons genetic data specifically could be lucrative. \u201cThis data could be sold on the down-low or monetized to insurance companies,\u201d Vigna adds. \u201cYou can imagine the consequences: One day, I might apply for a long-term loan and get rejected because deep in the corporate system, there is data that I am very likely to get Alzheimer\u2019s and die before I would repay the loan.\u201d<\/p>\n<p>MyHeritage doesn\u2019t offer health or medical tests, but many companies, like 23andMe and Helix, do. And there are plenty of players interested in DNA: researchers want genetic data for scientific studies, insurance companies want genetic data to help them calculate the cost of health and life insurance, and police want genetic data to help them track down criminals, <a href=\"https:\/\/www.theverge.com\/2018\/4\/26\/17288532\/golden-state-killer-east-area-rapist-genealogy-websites-dna-genetic-investigation\">like in the recent Golden State Killer case<\/a>. Already, we lack <a href=\"https:\/\/www.theverge.com\/2017\/3\/20\/14880400\/politics-law-bioethics-genetic-privacy-discrimination-gina-workplace-wellness\">robust protections when it comes to genetic privacy<\/a>, and so a genetic data breach could be a nightmare. \u201cIf there is data that exists, there is a way for it to be exploited,\u201d says <a href=\"http:\/\/law.ubalt.edu\/faculty\/profiles\/ram.cfm\">Natalie Ram<\/a>, a professor of law focusing on bioethics issues at the University of Baltimore.<\/p>\n<p><!-- Link: <a href=\"https:\/\/www.theverge.com\/2018\/6\/6\/17435166\/myheritage-dna-breach-genetic-privacy-bioethics\">https:\/\/www.theverge.com\/2018\/6\/6\/17435166\/myheritage-dna-br...-bioethics<\/a> --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>As the Equifax hack last year showed, there\u2019s a lack of legislation governing what happens to data from a breach. And ultimately, a breach of genetic data is much more serious than most credit breaches. Genetic information is immutable: Vigna points out that it\u2019s possible to change credit card numbers or even addresses, but genetic [\u2026]<\/p>\n","protected":false},"author":417,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,34,1625,412,1495,47],"tags":[],"class_list":["post-79601","post","type-post","status-publish","format-standard","hentry","category-biotech-medical","category-cybercrime-malcode","category-encryption","category-genetics","category-health","category-neuroscience"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/79601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/417"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=79601"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/79601\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=79601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=79601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=79601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}