23andMe recently disclosed a significant data breach that impacted 14,000 user accounts as well as 6.9 million profiles related to DNA relatives and family trees. Affected users can now pursue compensation in light of this incident. You can find more details on how to claim your compensation here.
Following a credential-stuffing attack in 2023, 23andMe agreed to a settlement of $30 million for consumers who were affected. Earlier this year, the genetic testing company filed for Chapter 11 bankruptcy, raising new privacy concerns regarding the potential sale of customer data. The settlement funds are expected to be distributed as bankruptcy proceedings unfold.
Compensation Details
If every impacted account were to receive an equal amount, the payout would be approximately $4.35 per individual. However, those with extraordinary claims—specifically individuals who experienced identity theft or fraudulent tax activities linked to the breach—could be eligible for reimbursements up to $10,000. This compensation may cover various expenses, including cybersecurity measures and mental health services.
Residents of Alaska, California, Illinois, and Oregon could see around $100 in compensation due to state privacy laws. This same amount is likely to be extended to users whose personal health information was compromised during the breach.
The settlement also outlines a provision for three years of identity monitoring services through a specialized program dubbed Privacy & Medical Shield + Genetic Monitoring.
Filing a Claim with 23andMe
There are two categories of claims permissible under 23andMe’s bankruptcy filing. Those affected by the 2023 data breach may submit a Cyber Security Incident Claim, which must be filed by July 14, 2025. To qualify, individuals must have been 23andMe customers between May 1, 2023, and October 1, 2023, and have received notification that their data was compromised. Claimants must also provide evidence of any financial or non-financial damages incurred as a result of the incident.
Claims can be submitted online via the Kroll Restructuring Administration portal or through a mailed hard copy of the claim form. Completing a claim involves providing personal information and details of the incurred harm, supported by documentation like bank statements or credit card records.
If you have not been directly affected by the breach but have other complaints regarding 23andMe, you may file a general claim form following the same guidelines and deadline.
