Privacy commissioner Philippe Dufresne says inadequate security measures opened the door to a data breach discovered two years ago at genetic testing company 23andMe. Dufresne and U.K. information commissioner John Edwards have released the findings of their joint investigation into the breach, which affected almost seven million people, including nearly 320,000 in Canada.

The Canadian Press