Canadians who used 23andMe to learn about their family ancestry could have money coming their way due to a class-action settlement.
Eligible Canadians could soon get a payout from the years-long data breach class-action lawsuit against 23andMe, a U.S.-based personal genomics company. On Friday, Canadian law firm KND Complex Litigation published a notice alerting affected Canadians that they now have until June 25 to claim part of a settlement worth US$3.25 million (around C$4.5 million).
The lawsuit
Jennie Book/Shutterstock
In October 2023, 23andMe revealed that a data breach exposed the personal information of customers, which appeared for sale on the dark web.
The DNA testing company said that hackers accessed data of nearly 6.9 million users. KND Complex Litigation launched a class-action lawsuit against 23andMe Holding Co. and 23andMe, Inc., on behalf of Canadian customers, alleging that the company failed to protect its customers’ highly sensitive and valuable personal data.
“The action alleges that contrary to their promises, statements and representations, as well as the privacy regulation and industry standards applicable to them, the defendants did not introduce, implement or maintain proper or adequate data retention and data protection practices,” reads the lawsuit.
The lawsuit further alleges the company violated its own standards and that the breach was the result of careless and reckless handling of highly sensitive customer data.
In September 2025, both parties agreed on a US$3.25 million (around C$4.5 million) settlement, which would also cover legal fees, expenses, and applicable taxes.
Are you eligible?
nevodka/Shutterstock
If you’re a Canadian who used 23andMe, you could be eligible to claim part of the settlement.
To qualify, you need to be a Canadian resident and a 23andMe customer between May 1, 2023, and Oct. 1, 2023, which was the time of the cybersecurity incident. You can also file a claim if you received a notice from the company alerting customers that their personal information was compromised. The settlement only covers customers who didn’t opt out of the class-action settlement.
How much can you receive?
Erman Gunes/Shutterstock
If you meet the eligibility requirements, you could be compensated through two types of claims.
The first one is the eligible extraordinary claims. If you have documentation to prove that you incurred out-of-pocket expenses between Oct. 1, 2023, and March 31, 2024, due to the security breach, you can receive up to C$2,500. Associated costs can include any purchase of a physical security or monitoring system, seeking professional mental health counselling or treatment, or other related expenses.
The second is the eligible extraordinary claims, which are a pro-rated share. You can file a claim without providing additional information or documentation.
According to the claims website, payments will be made in Canadian dollars. If you meet the eligibility requirements, you’ll instantly be considered for compensation as long as you fill out a claims form.
How can you file a claim?
Canadian 23andMe customers who meet the eligibility criteria should fill out a claim form, which can be submitted by mail, email, fax, or through the claims website. The deadline to file a claim is June 25, 2026, at 11:59 p.m. PT.
You’ll need to provide your personal details, contact information, the type of claim that you qualify for, supporting documents if required, and the method of payment you prefer.
Visit the 23andMe Canadian class-action settlement website for more information.
With files from Isabelle Docto