It may be a couple years yet until the big teleheath hacks come out, and you discover all those private disclosures are sold for pennies on the dark market, or just leveraged by adversaries.
100% with you on this. Sec has to get it right, every. single. time. and that's not realistic. No one gets it right every single time. I'm not even getting into 0day and similar.
However, companies that are callous with your data and their own sec, like Equifax was, should suffer more than the current fine of a nickel, then it's on to BONUSES, with no other repercussions.
Lastly, according to the horrifically bad CU ruling, corps are practically humans, in every sense that gains them an advantage, but somehow magically immune in situations where they might find the slightest difficulty.
It's also interesting that outside of the US their lack of security would open them to criminal liabilities under GDPR.
23 was cred stuffed, which is still not good, but not the same level of negligence.
US laws are a sad tragedy of the rich fucking the not rich harder and harder and harder every decade.
"Our anonymous sequencing service enables our users to sign up, submit their samples, and receive their genetic reports without ever personally identifying themselves."
You leave your DNA at every restaurant you visit, and you display your biometrics in every public place. They are not remotely secret or private or sensitive.
This also assumes it's a clean sample and not contaminated with all the other DNA present, simple dust, residue on the surface of whatever the DNA was pulled from and/or whatever.
I'm not saying it's not possible, I'm saying that it's very, very, very unlikely, at least for mortals.
Source: I worked in 2 labs, one of which did genetic testing. Note: I'm IT, not science, so I was the person that setup the reporting triggers, output, input, etc. I do know something about taking samples and swiping them from a glass isn't the typical way, for many, many reasons.