Here's how Canadians can get payout in proposed $4.5M 23andMe settlement

Canadians who have used 23andMe to learn more about their family ancestry could soon cash in on a massive proposed settlement against the company, if they're eligible.

Toronto-based law firm KND Complex Litigation announced on Wednesday that a proposed settlement has been reached in the class actions filed in October 2023 and September 2024 against the genetic testing company.

The class actions were filed in response to a data breach that exposed users' highly sensitive and valuable personal information. 23andMe identified and disclosed the data breach in October 2023.

In December that year, the DNA testing company revealed that hackers accessed data of nearly 6.9 million of its users in total.

A 23andMe spokesperson confirmed that the 14,000 accounts the "threat actors" accessed were a small percentage (0.1 per cent) of its user accounts.

The hackers gained access to these accounts "in instances where usernames and passwords that were used on the 23andMe website were the same as those used on other websites that had been previously compromised or were otherwise available," stated the spokesperson.

23andMe noted that through these 14,000 accounts, the hackers were able to access nearly 5.5 million DNA relative profile files, which include information such as display name, predicted relationships, and percentage of DNA shared with matches.

About 1.4 million customers participating in the DNA Relatives feature had their Family Tree profile information accessed, which is made up of a limited subset of DNA Relatives profile information.

According to KND Complex Litigation, the proposed Canadian settlement provides for the payment of US$3.25 million (C$4.49 million). This is still subject to court approval.

"As part of the proposed Canadian settlement, the claims against the other defendants will be dismissed on a with prejudice and without costs basis," noted the law firm.

"The proposed Canadian settlement is not an admission of liability on the part of 23andMe, who denies the allegations and vigorously defend the actions against them."

Who's eligible to cash in on this proposed settlement, and how much could you get?

You could cash in on the proposed settlement if you were a customer of 23andMe at any time between May 1, 2023, and Oct. 1, 2023 (data security incident period), resided in Canada during this period, and received a notice from the DNA testing company notifying you that your personal information was compromised in the data breach.

Eligible Canadians could receive compensation through two types of claims:

1. Eligible extraordinary claims: Reimbursement of up to $2,500 for specific documented, unreimbursed, out-of-pocket expenses incurred as a direct result of, and in response to, the cybersecurity incident.
2. Eligible ordinary claims: A pro-rated share requiring no documentation.

If you think you fit this criteria, the next step is to do nothing if you have no objection to the proposed settlement.

However, if you wish to opt out or object to the settlement, you'll need to fill out a form found on the settlement site and send it to 23andMe@conciliainc.com by no later than 11:59 p.m. PST on  Jan. 2, 2026.

For more information and to stay up to date with the class action, check the 23andMe settlement site.