The company responded to lawsuits which claim it breached US privacy laws and said that the breach occurred due to users ‘negligently recycled and failed to update their passwords’.

Read more: 23andMe blames users recycling passwords for data breach