23andMe $4.5-million class action approved, June deadline set for claims

A $4.5-million (US$3.25 million) class-action settlement has been approved by U.S. and Canadian courts for Canadians impacted by a 2023 data breach at 23andMe, a genetic testing company. The breach compromised the personal data of nearly 320,000 Canadians, including sensitive information about health, ancestry, and relatives. Eligible claimants who incurred expenses as a result of the breach could receive up to $2,500, while those without documented expenses may receive approximately $17.77. The deadline to submit a claim is June 25th.

23andMe customers between May 1 and October 1, 2023, who were notified of the breach are eligible for compensation. The settlement allows 23andMe to avoid admitting guilt. The company previously settled a similar U.S. lawsuit for US$30 million. Legal fees, amounting to 33 percent of the total, will be deducted from the settlement fund.

Founded in 2006, 23andMe filed for bankruptcy in March 2025 and was subsequently sold to a non-profit led by co-founder Anne Wojcicki. Investigations by privacy officials in Canada and the U.K. revealed that 23andMe failed to implement basic data protection measures, resulting in a £2.3 million fine in the U.K. The company has since stated it has “implemented multiple steps to increase security” and its new owner has made commitments to enhance data privacy.

(Source：Bnn Bloomberg)