DNA Diagnostics Center (DDC), a DNA testing company located in Ohio, recently disclosed a data breach that was confirmed in late October 2021 and impacts over 2.1 million individuals. DDC in their incident notice, however, did reveal that previously unknown access to its network was detected by the company in early August 2021. The breach spanned from late May 2021 to late July 2021, and the compromised database contained backups from 2004 through 2012. The database contained full names, credit card numbers with CVVs, debit card numbers with CVVs, financial account numbers, and platform account passwords. Despite the company’s “paternity, DNA relationship, fertility, COVID-19, ancestry, and testing for immigration purposes” services, it should be noted that no genetic data has been exposed or compromised during this incident. DDC stated in their incident notice, which is linked below, that the compromised database was “associated with a national genetic testing organization system that DDC acquired in 2012” but was never utilized or active past 2012. The company concluded that “impacts from this incident are not associated with the DDC” but that “Social Security number[s] or payment information” of affected individuals may be impacted as well.