Of course it could be massive credential stuffing. The problem is that an inside job would look completely identical. Or negligent security. If you sell your D

Of course it could be massive credential stuffing. The problem is that an inside job would look completely identical. Or negligent security. If you sell your DNA profile to someone, they are free to give or sell it to someone else. At best that's a breach of contract, but what are you going to do? A successful class action only changes the price retroactively. (I am told some people sell their DNA data at a negative price, which I suspect may be the same people who pay to have to have a remotely controlled microphone at home. That I don't understand, and accept that I probably never will. But it doesn't change the underlying premise and market dynamic. The above is still true.)