You’re curious about the 23andMe lawsuit saga, aren’t you? In 2023, the company faced a major data breach affecting 6.9 million customers, leading to a $30 million class action settlement. Though partially covered by insurance, the incident severely impacted 23andMe’s financials, with the company exploring going private and eventually filing for bankruptcy. Allegations of negligence and misrepresentation by 23andMe surfaced during the legal proceedings. If you’d like to dive deeper into this complex case, the key details are outlined above.
Key Takeaways
- 23andMe faced a $30 million class action lawsuit over a 2023 data breach affecting 6.9 million customers, leading to 3 years of complimentary identity monitoring services.
- Hackers targeted customers with Chinese and Ashkenazi Jewish ancestry, accessing 5.5 million DNA Relatives profiles and 1.4 million customer accounts.
- 23andMe’s financial struggles, including lost revenue and a potential bankruptcy filing, complicated the lawsuit and settlement process.
- Plaintiffs accused 23andMe of failing to mitigate breach risks, misrepresenting data security, and inadequately protecting certain customer groups.
- Bankruptcy proceedings auctioned off 23andMe’s medical and consumer data assets, raising concerns about the privacy of its customers.
Settlement Details
According to the details, 23andMe has agreed to pay a whopping $30 million to settle a class action lawsuit stemming from a 2023 data breach that affected 6.9 million customers. The settlement includes 3 years of complimentary identity monitoring services for those impacted.
Plaintiffs’ lawyers are expected to receive 25-33% of the settlement. Class members are eligible for up to $10,000 per individual in extraordinary claims, capped at $5 million. Customers in certain states may also be eligible for $100 in statutory cash claims as part of the settlement.
Data Breach Incident
The data breach at 23andMe in 2023 compromised the personal information of 6.9 million customers, nearly half of the company’s 14.1 million customer database. The hacker specifically targeted customers with Chinese and Ashkenazi Jewish ancestry, accessing 5.5 million DNA Relatives profiles and 1.4 million customer accounts. 23andMe disclosed the breach five months later, stating it involved a credential stuffing attack, not a cyberattack. Around 14,000 individual accounts were compromised, representing 0.1% of 23andMe’s total customers.
The breach raised concerns about:
- Genetic data security
- Customer privacy
- 23andMe’s response time
- Potential class-action lawsuits
23andMe’s Financial Situation
Given the data breach and the resulting legal fallout, 23andMe’s financial situation has become extremely precarious. The company lost $69.4 million on revenue of $40.4 million in Q2 2023 and is now seeking to take the company private with shares trading below $1 since mid-December 2023.
23andMe cited its uncertain financial condition in requesting to halt class member arbitrations, though $25 million of the $30 million settlement cost is expected to be covered by cyber insurance. Plaintiffs’ lawyers may seek legal fees up to 25% of the settlement amount, further straining 23andMe’s resources. Bankruptcy and potential Chapter 11 filing remain distinct possibilities for the embattled company.
Is There a Connection Between the 23andMe Lawsuit and Product Safety Concerns Like the Talcum Powder Lawsuit?
The 23andMe lawsuit raises intriguing questions about genetic testing and product safety, echoing concerns similar to those seen in talcum powder litigation. As consumers seek clarity on genetic risks, both cases highlight potential dangers in products once deemed safe, prompting a deeper examination of the responsibilities companies have towards their customers.
Plaintiffs’ Allegations
Plaintiffs took the company to task, accusing 23andMe of failing to safeguard customer privacy and data following a massive 2023 data breach that impacted 6.9 million users.
Key allegations include:
- 23andMe should have been aware of the risk and taken steps to mitigate it.
- The company lied about the breach’s scope and failed to properly notify certain ancestry groups.
- 23andMe lacked proper data breach protocols and industry-standard security protections.
- The company misrepresented its data security and hid the true extent of the exposure of customers’ genetic material, DNA Relatives, and other sensitive profile data.
Bankruptcy Filing and Customer Data
In the aftermath of the data breach allegations, 23andMe stunned customers and the public by filing for bankruptcy in early 2024. Investigations by the Attorney General revealed that the consumer genetics company had sold customer data, including sensitive medical information, to Chinese firms and had failed to adequately protect the privacy of its Ashkenazi Jewish customers.
With lawsuits mounting, 23andMe declared insolvency, leaving millions of customers uncertain about the fate of their genetic data. Under the bankruptcy proceedings, the company’s medical shield and consumer data assets were auctioned, raising concerns about the future privacy of customer information and the company’s ability to honor its privacy statement to delete data upon request.
Conclusion
The 23andMe lawsuit saga has been a rollercoaster ride, leaving customers and the company in a precarious position. With the settlement details, data breach incident, and financial woes, it’s clear that 23andMe’s future hangs by a thread, like a tightrope walker in a gusty wind. As the plaintiffs’ allegations and bankruptcy filing loom large, the fate of customer data remains uncertain, leaving the entire affair as murky as a dense fog.
