Settlement in 23andMe data breach class-action proposed at about $4.49M
A proposed $4.49 million settlement has been reached with 23andMe following a 2023 data breach affecting nearly 320,000 Canadians.Summary
A proposed class-action settlement of approximately $4.49 million (US$3.25 million) has been reached with 23andMe regarding a data security breach that occurred between May 1, 2023, and October 1, 2023. The breach compromised the personal data of almost seven million individuals globally, including nearly 320,000 Canadians, exposing sensitive information such as health data, race, ethnicity, and family details. Eligible Canadian customers who received notification of the breach could receive up to $2,500 if they incurred documented expenses as a result, or approximately $17.77 if no expenses are submitted.
23andMe maintains that the settlement is a “compromise” and not an admission of guilt, and is part of the company’s ongoing insolvency proceedings after filing for bankruptcy in March. The company “denies the allegations and vigorously defend[s] the actions against them.”
The proposed settlement is subject to approval by both United States and Canadian bankruptcy courts, and legal fees representing 33 percent of the total will be deducted. The information was released by CP24 on December 3, 2025.
(Source：CP24 Toronto)