Canadians who had their personal data compromised in the 2023 23andMe data breach are eligible for a share of a US$3.25 million (approximately C$4.5 million) settlement. The settlement, approved by both U. S. and Canadian courts, resolves a class-action lawsuit filed against the genetic testing company following the breach, which affected nearly 6.9 million users worldwide, including approximately 320,000 Canadians.
The data breach, which occurred between May and October 2023, exposed highly sensitive personal information, including health details, race, ethnicity, gender, relatives, and birthdates. Some of this stolen data was even offered for sale on the dark web. The lawsuit alleged that 23andMe failed to adequately protect its customers' data, violating privacy regulations and industry standards. 23andMe has not admitted any guilt or liability as part of the settlement.
Eligible Canadians who were 23andMe customers between May 1, 2023, and October 1, 2023, and who received a notification that their data was compromised, are entitled to claim compensation. Individuals who incurred out-of-pocket expenses due to the breach between October 1, 2023, and March 31, 2024, can claim up to C$2,500 for documented costs related to security measures, mental health treatment, and other related expenses. Even without documented expenses, affected individuals can still claim a pro-rated share of the settlement funds.
The deadline for submitting claims is June 25, 2026, at 11:59 p. m. PT. Instructions on how to submit a claim can be found on the Canadian settlement website. Toronto-based KND Complex Litigation, the class counsel, called the settlement "an excellent result for the affected Canadian customers". This settlement is considered precedent-setting as it is believed to be the first Canadian class action claim settled within a Chapter 11 insolvency proceeding.
