23andMe reaches Canadian settlement in data breach class action lawsuit

Genetics data company 23andMe has reached a proposed settlement with plaintiffs in a Canadian class action lawsuit stemming from a significant data breach disclosed in October 2023, which affected approximately 320,000 Canadian customers out of seven million worldwide. The proposed settlement, totaling $4.49 million (US$3.25 million), is part of 23andMe’s insolvency proceedings following the company’s bankruptcy filing in March 2024. Eligible customers, those who used the service between May 1 and October 1, 2023, and received notification of the breach, may be reimbursed up to $2,500 for documented out-of-pocket expenses.

The settlement requires approval from both United States and Canadian courts, with hearings scheduled for February 17, 2026, in the U.S. and subsequently in British Columbia. Individuals wishing to object to the settlement have until January 2, 2026, to submit an opt-out form.

A joint investigation by Canadian and U.K. privacy commissioners found that 23andMe had “inadequate” security systems and was slow to respond to warnings about data vulnerabilities, leading to the compromise of sensitive genetic information. The U.K. Information Commissioner levied a £2.31 million fine against the company.

(Source：Global News)