What Happened
Genetic testing company 23andMe has settled a $30 million lawsuit over a data breach that exposed the personal and genetic information of 6.9 million customers.
The breach, which occurred in October 2023, led to a class-action lawsuit filed in January 2024. As part of the settlement, 23andMe will pay $30 million in damages, provide three years of security monitoring for affected customers, and implement stronger cybersecurity measures to prevent future breaches.
Despite agreeing to the settlement, 23andMe denies any responsibility for the breach.
Impacted customers will receive cash compensation and enroll in a new security program called Privacy & Medical Shield + Genetic Monitoring.
Why It Matters
This settlement is a wake-up call for companies dealing with sensitive data, showing just how critical it is to have strong cybersecurity in place, especially in fields like genetics where the stakes are incredibly high