23andMe Agrees to $30 Million Settlement Over Data Breach

23andMe has agreed to a $30 million settlement following a data breach that exposed the personal information of approximately 6.9 million users, with accusations that the company failed to adequately protect user data and notify affected customers promptly. The breach, which was revealed in October 2023, involved hackers accessing sensitive data through compromised accounts, specifically targeting users of Chinese and Ashkenazi Jewish descent. As part of the settlement, 23andMe will provide cash payments, with only $5 million allocated for direct compensation, while the majority will cover legal fees and cybersecurity improvements. Additionally, affected customers will receive three years of security monitoring through a program called Privacy & Medical Shield + Genetic Monitoring. Despite the settlement, 23andMe denies any wrongdoing, stating that the decision was made in the best interest of its customers. The settlement is still pending court approval before payments can be distributed.