Attack. In October 2023, a hacker known as Golem claimed to have hijacked the profile information of millions of users from 23andMe. The attack, acknowledged by the company, was a result of hacking techniques including 'credential stuffing' to gain unauthorised access to the profile information of millions of users.