Partner
Woods Lonergan Announces $30 Million Preliminary Settlement in 23andMe Data Breach Class Action Lawsuit (Pending Court Approval)
[NEW YORK, NEW YORK] – FEBRUARY 14, 2025 – Woods Lonergan PLLC, leading complex civil litigation firm representing a named plaintiff in the consolidated class action lawsuit against 23andMe, Inc., is pleased to announce that a preliminary settlement, subject to court approval, has been reached in the case In re 23andMe, Inc. Customer Data Security Breach Litigation (No. 24-md-03098) in the U.S. District Court for the Northern District of California. The proposed $30 Million settlement compensates victims, and addresses the massive data breach announced by 23andMe in October 2023, impacting approximately seven million customers.
Key Settlement Terms
- $30 Million Settlement Fund: 23andMe has agreed to establish a $30 million fund to provide cash payments to affected customers.
- Enhanced Security Measures: The settlement includes provisions for 23andMe to implement and maintain enhanced data security measures to prevent future breaches.
- Privacy & Medical Shield + Genetic Monitoring Program: Affected customers will be eligible to enroll in a three-year program known as the Privacy & Medical Shield + Genetic Monitoring program.
Background of the 23andMe Data Breach
The data breach, which reportedly began around April 2023 and lasted approximately five months, compromised the highly sensitive personal and genetic information of nearly half of 23andMe’s 14.1 million customers at the time. The exposed data included names, sex, dates of birth, DNA relative information, family tree details, and geographic information. Of particular concern was the targeting of data from individuals of Chinese and Ashkenazi Jewish ancestry, which was subsequently offered for sale on the dark web.
The lawsuits alleged that 23andMe failed to adequately protect customer data and did not promptly notify affected individuals after becoming aware of the breach as early as August 2023. Forty class-action lawsuits, filed on behalf of the victims, were centralized in the United States District Court for the Northern District of California by the Judicial Panel on Multidistrict Litigation (MDL). A preliminary settlement of the proposed class action was filed in federal court in San Francisco, and requires a judge’s approval. The lawsuits also raised potential violations of the CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act), given the scope of the breach and 23andMe’s location in California.
Statement from Woods Lonergan:
Jim Woods, Managing Partner of Woods Lonergan PLLC, is quoted as saying, “‘The $30 million preliminary settlement, awaiting final court approval, would be a significant victory for the millions of individuals, whose privacy was compromised. It underscores the importance of corporate accountability in protecting sensitive personal data, particularly in the context of genetic information. We are proud to have secured this meaningful relief for our clients, including both financial compensation and a commitment to improved security practices.'”
23andMe’s Response:
In a recent court filing, 23andMe called the settlement fair, adequate and reasonable, while citing its “extremely uncertain financial condition,”
Next Steps
The preliminary settlement is subject to approval by the Honorable Edward M. Chen of the U.S. District Court for the Northern District of California. Further details regarding the claims process, eligibility criteria, and deadlines will be made available following court approval.
About Woods Lonergan PLLC
For over 30 years, Woods Lonergan PLLC has been a leading New York-based litigation firm specializing in complex civil litigation, including class action, data breach, cybersecurity litigation, and multidistrict litigation. Woods Lonergan has a proven track record of success representing individuals, closely held businesses, and mid-sized companies in high-stakes litigation, often involving multi-million dollar claims. Our attorneys have secured significant victories and settlements against major corporations represented by prominent law firms. Woods Lonergan has a proven track record of successfully holding large corporations accountable for failing to protect highly sensitive consumer data.
Contact Information: Woods Lonergan One Grand Central Place 60 East 42nd Street, Suite 1410 New York, NY 10165 (212) 684-2500 https://www.woodslaw.com
Media Contact: Nancy Byrne Nancy.Byrne@woodslaw.com
CASE INFORMATION
U.S. District Court, Northern District of California. 23ANDME, INC. CUSTOMER DATA SECURITY BREACH LITIGATION Case Number: 3:24-md-03098