Why keep calling the principle criminal entity a "threat actor", when in fact there is no 'act' here. They are openly selling stolen data, and it's been verified as stolen. Not deflecting the stupidity and criminality of 23andme...how stupid can a corporation working with peoples biological data be...oh wait...yes, repeatedly...its embedded in the business model apparently...operate for N+1 years, then provide a breach. Wish I could wake up from this recurring nightmare of groups with more money than they know what to do with, pretending to move humanity forward, making stupid mistakes. Nonetheless, please stop naming it a "threat actor". They are not 'acting' in any sense of the word.