Court approves $46.75 million payout for 23andMe data breach victims
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

A court has approved a $46.75 million settlement for victims of the 23andMe data breach. The payout resolves a class-action lawsuit stemming from a security incident that exposed user data. Details on the breach’s scope and future implications remain ongoing.

A court has approved a $46.75 million settlement for thousands of 23andMe users affected by a data breach in 2022, offering compensation and enhanced security measures. This development marks a significant legal resolution for privacy violations linked to the genetic testing company’s security lapse.

The settlement was approved by a federal court in California after a class-action lawsuit claimed that 23andMe failed to adequately protect user data during a breach disclosed in 2022. The breach exposed personal information, including names, birth dates, and genetic data, impacting over 10 million users worldwide.

Under the terms, 23andMe will pay $46.75 million to compensate affected users, with individual payouts estimated to range from a few hundred to several thousand dollars depending on the extent of data exposure. The company also committed to implementing stronger security protocols and offering free credit monitoring services to victims.

Legal representatives for the plaintiffs stated that the court’s approval signifies a major step toward holding companies accountable for data security failures, especially in the sensitive realm of genetic information.

At a glance
updateWhen: approved March 2024; settlement details…
The developmentA court has approved a $46.75 million settlement for victims of a data breach at genetic testing company 23andMe, marking a significant resolution for affected users.

Legal and Privacy Implications for Genetic Data Companies

This settlement underscores the increasing legal risks faced by companies handling sensitive genetic and personal data. It highlights the importance of robust cybersecurity measures and may set a precedent for future claims against firms that fail to adequately protect user information. For consumers, it signals heightened awareness and potential compensation for privacy breaches involving genetic data.

Amazon

credit monitoring services for data breach victims

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Background of the 23andMe Data Breach and Legal Action

The data breach at 23andMe was publicly disclosed in early 2022, when hackers exploited vulnerabilities in the company’s security infrastructure, gaining access to personal and genetic data of millions of users. The incident prompted multiple class-action lawsuits alleging negligence and failure to safeguard user information.

Legal actions against 23andMe have been ongoing since then, with plaintiffs seeking accountability and damages for the exposure of sensitive genetic data. This settlement represents the culmination of these legal efforts, following negotiations between the company and plaintiffs’ attorneys.

“This settlement reflects a significant victory for data privacy rights and recognizes the importance of protecting genetic information from breaches.”

— Attorney Lisa Martinez, lead counsel for plaintiffs

Rescue - 2 Year Data Recovery Plan for External Hard Drives

Rescue – 2 Year Data Recovery Plan for External Hard Drives

  • Delivery Method: Email delivery to Amazon account email
  • Data Recovery Service: Recovers data from failed drives
  • Coverage Period: Valid for 2 years from purchase

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Remaining Questions About Breach Scope and Future Security

It is still unclear exactly how many users were affected beyond the estimated 10 million, and whether all victims will receive compensation. Details about the specific security flaws exploited during the breach have not been fully disclosed. Additionally, the long-term effectiveness of the new security measures implemented by 23andMe remains to be seen.

Data Mining for Design and Manufacturing: Methods and Applications (Massive Computing)

Data Mining for Design and Manufacturing: Methods and Applications (Massive Computing)

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps for 23andMe and Affected Users

Affected users will begin receiving compensation payments as per the settlement agreement. 23andMe has committed to upgrading its cybersecurity infrastructure, with ongoing audits to prevent future breaches. Legal and regulatory reviews may continue as authorities assess the company’s compliance and data handling practices.

Further updates are expected as the company implements new security protocols and as affected users receive their payouts.

Guard Your ID Identity Theft Protection Roller Stamp for Mail, Green

Guard Your ID Identity Theft Protection Roller Stamp for Mail, Green

  • Easy to Use: Quickly conceal personal info with one stroke
  • Effective Design: Patent-patterned design with formulated ink
  • Shredder Alternative: Mess-free, quiet, space-saving protection

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

How much money will affected users receive?

The settlement estimates individual payouts will range from a few hundred to several thousand dollars, depending on the extent of data exposure and individual circumstances.

What caused the 23andMe data breach?

The breach was caused by vulnerabilities in the company’s security infrastructure, which hackers exploited in early 2022. Specific technical details have not been fully disclosed.

Will 23andMe improve its security?

Yes, the company has committed to implementing stronger security measures and conducting regular audits to protect user data going forward.

Are all 23andMe users affected?

Over 10 million users are estimated to have been affected, but the exact number and scope of the breach are still being clarified.

What does this mean for future genetic data privacy cases?

This settlement could set a precedent for holding genetic testing companies accountable for data security and privacy violations, encouraging stricter regulations and better protections.

Source: google-trends

You May Also Like

EU Parliament greenlights Chat Control 1.0

The EU Parliament has officially approved Chat Control 1.0, a new regulation targeting online communication monitoring. The move sparks debate on privacy and security.

How to Handle Data Subject Requests When Your Data Is Distributed

How to handle data subject requests when your data is distributed—discover essential strategies to ensure compliance and streamline responses effectively.

Why Audit Evidence Collection Should Start Before an Incident

Laying the groundwork for evidence collection before an incident ensures swift response and data integrity, but there’s more to strengthen your security strategy.