Newsletter

23andMe Settles Data Breach Lawsuit for $30 million

Description:  

23andMe was ordered to pay $30 million to customers who were impacted by a data breach in October 2023 that occurred within 23andMe and exposed customer data, information, and personally identifiable information (PII).  The settlement of $30 million comes after a lawsuit was filed against the company for failure to maintain security practices that protect their customers and the data that they store with the company. 

23andMe suffered the data breach in October 2023 and impacted roughly 6.9 million customers across the company’s different platforms.  In addition to the payout settlement, 23andMe will also be required to provide security and identity monitoring services for impacted customers for a period of three years.  Of the $30 million required payout, the company is reporting that cyber insurance will cover roughly $25 million of that cost. 

External Links:

Reuters