A $30,000,000 class action lawsuit has been settled over a data breach at 23andMe that exposed personal information of approximately 6.9 million customers. The breach occurred in 2023 when hackers accessed customer data through what is known as “credential stuffing” cybersecurity attacks. The class action lawsuit alleged that 23andMe failed to adequately protect user data and did not properly notify affected customers, especially those with Ashkenazi Jewish and Chinese ancestry whose data was specifically targeted by malicious hackers.
The total settlement for the 23andMe data breach is $30 million. Here’s a breakdown of how the $30 million settlement is expected to be distributed:
User Compensation: Only $5 million of the total settlement is anticipated to be designated for user compensation in the form of class action claim payments, once the settlement is approved, if it is finally approved.
Legal Fees: A significant portion of the settlement will be allocated to cover legal fees.
Security Enhancements: Part of the settlement will go towards improving 23andMe’s security measures.
You may qualify for a payout if you were one of the 6.9 million 23andMe customers whose data was compromised in the 2023 breach. This includes users who had their DNA Relatives profile information or Family Tree profile information accessed.
Affected users can claim anywhere from $100 up to $10,000 for the most “extraordinary” cases. Customers in Alaska, California, Illinois, and Oregon are subject to genetic privacy laws and can only claim $100. There may be specific legal protections and limitations for customers in certain states regarding genetic privacy and compensation in the 23andMe data breach settlement.
Specifically, Alaska, California, Illinois, and Oregon have enacted stricter genetic privacy laws compared to other states. These laws provide additional protections for individuals’ genetic information, including:
• Limits on genetic testing without consent
• Restrictions on access to and disclosure of genetic data
• Requirements for informed consent
• Penalties for violations of genetic privacy
The settlement is still pending approval by a judge. Specific details about claim filing procedures have not been released yet for the 23andMe class action settlement.
Once the settlement is approved, instructions on how to file for reimbursement will be provided, if the class action is approved by the Court. It is not clear yet whether proof will be required to file a claim. This detail may be clarified when the official claim process is announced and a website for class action administration is established.
As of now, there is no specific claim form website available. The settlement is still in the approval stage. Once approved, a website may be used for administering the distribution of funds and notifying those involved about payouts. We will update the links below with a website once it is available.
Given that the settlement is still pending approval, the best course of action is to wait for official announcements from 23andMe or the court regarding the claim process. Once approved, detailed instructions on how to file a claim, including any proof requirements and the official claim website, should be made available to affected consumers as part of the class action lawsuit.
Please be aware that your claim form will be rejected if it contains fraudulent information. By submitting your information and your sworn statement of its accuracy, you are agreeing to do so under penalty of perjury. Submitting false information not only jeopardizes your claim but also affects others who are genuinely eligible for the settlement. If you are uncertain about your eligibility for this class action settlement, please visit the class action administrator’s website for more information. Note that NoProofClassActions.org participates in the Amazon affiliate advertising program, and this post may include affiliate links, which could result in us earning a commission if you make a purchase through those links.