23andMe Settles Data Breach Lawsuit for $30 Million

The settlement includes compensation for affected customers and enhanced security measures following a breach that exposed the data of 6.9 million users.

• 23andMe will pay $30 million to settle a class action lawsuit over a 2023 data breach that affected 6.9 million customers.
• The settlement includes cash payments and three years of security monitoring for those impacted by the breach.
• The breach, attributed to credential stuffing, particularly targeted users with Chinese or Ashkenazi Jewish heritage.
• 23andMe has committed to strengthening its security protocols, including mandatory two-factor authentication and annual cybersecurity audits.
• The company's financial struggles have been highlighted, with cyber insurance expected to cover $25 million of the settlement costs.

4 Articles

The Verge BleepingComputer One America News Network