Canadians Reach Proposed $4.49M Settlement in 23andMe Data Breach

Canadians impacted by a significant data security breach involving genetic testing company 23andMe are set to receive a proposed class-action settlement amounting to approximately $4.49 million. This settlement addresses claims stemming from a breach that occurred two years ago, affecting nearly 320,000 individuals in Canada out of a total of almost seven million people worldwide.

The breach, which took place over a five-month period beginning in April 2023, exposed sensitive personal data, including health information, racial and ethnic details, and identifying information such as date of birth and gender. Canada’s privacy regulator noted the seriousness of the incident, emphasizing the vulnerability of individuals’ personal information.

Settlement Details and Eligibility

According to a press release issued on December 3, 2025, the proposed settlement represents a “compromise” of disputed claims and does not imply any admission of wrongdoing by 23andMe. The settlement would apply to customers who used 23andMe services between May 1, 2023, and October 1, 2023, and who received notifications confirming that their personal data was compromised.

Eligible individuals could receive up to $2,500 if they present documented expenses resulting from the breach. Those who qualify but do not provide proof of additional costs would receive approximately $17.77. Legal fees amounting to 33 percent will be deducted from the total settlement, which is valued at $3.25 million in U.S. funds.

Bankruptcy Context and Legal Proceedings

This settlement is part of the insolvency proceedings of 23andMe, which filed for bankruptcy in March 2025. The proposed agreement is pending approval from both the United States and Canadian bankruptcy courts.

The release further clarified that the settlement does not equate to an admission of liability by 23andMe. The company maintains its position, denying the allegations and asserting that it will vigorously defend itself against the claims.

This report, which includes contributions from journalist Jim Bronskill, highlights the ongoing concerns surrounding data security and the implications of breaches in personal privacy. As these legal proceedings unfold, the impact on affected individuals remains a critical issue, underscoring the importance of stringent data protection measures.

For ongoing coverage of this and related topics, the Canadian Press continues to provide updates with support from the Canadian Medical Association.