• Open to New Clients
  • Data Privacy
  • December 20, 2023

Did 23andMe Expose Your Personal and Genetic Information?

You may be entitled to up to $750.

  • You may qualify for this claim if you received notice from 23andMe that your personal data was exposed in a data breach.
  • You should sign up if you have a 23andMe account and you received notice from 23andMe that your personal data was compromised in the data breach.
  • All claims are backed by Labaton Keller Sucharow, a national law firm that has recouped over $25 Billion for people like you.

23andMe is one of the nation’s largest consumer genetic testing companies. 23andMe lets consumers take an at-home DNA test and send it to 23andMe for genetic testing. Once the results of the test are available, 23andMe offers several other services including genotyping reports, trait reports, DNA relative finder, health predisposition reports, and pharmacogenetics reports.

In early October 2023, 23andMe, a prominent consumer genetic testing company, experienced a significant data breach impacting approximately 7 million of its users. Initially, the company reported that the breach affected only 0.1% of its customers, equating to about 14,000 individuals. However, it was recently revealed that the actual number of affected individuals was much higher. The breach involved unauthorized access to personal data of about 5.5 million people who had opted into 23andMe’s DNA Relatives feature, a service allowing customers to share certain data with others. This data included names, birth years, relationship labels, the percentage of DNA shared with relatives, ancestry reports, and self-reported locations. Additionally, the breach compromised the Family Tree profile information of another 1.4 million users, including display names, relationship labels, birth years, and locations. 23andMe is reported to be currently in the process of notifying its customers who were impacted by the breach.

Labaton is pursuing private arbitration claims against 23andMe on behalf of 23andMe members who were notified that their personal and genetic data were exposed as a result of this breach. Successful claims could be entitled to compensation of up to $750 under California privacy laws, or additional amounts in other states.


Please remember:

This content is for your information only and is not legal advice. We are not your lawyers until you sign an attorney-client agreement with us. All information provided by you is confidential and will only be used for your case.

Frequently asked questions

  • Miscellaneous
How do I know if I might be eligible for this claim?
If you were notified by 23andMe that your personal data was exposed as a result of the data breach, you might be eligible. Check and see if you qualify for this claim using the link above.
What is the California Privacy Rights Act?
The California Privacy Rights Act (“CPRA”) is a comprehensive privacy law in California. It aims to protect individuals’ data privacy rights. Companies that are subject to data theft or breaches can be subject to statutory damages up to $750 for exposing certain categories of consumers’ information.
How do I protect myself after a data breach?
Data breaches are becoming increasingly commonplace. However, you can do a few things to protect yourself if you think you have had your information exposed in a data breach. First, you should change the passwords for all your online accounts. Most people use the same or similar passwords for all their online accounts. So, if one password was exposed, there is a chance a hacker could gain access to all your online accounts. Second, it is important to monitor your online accounts for any suspicious activity. Be on the lookout for strange charges that you do not recognize or any phishing emails.
How do I find the data breach notice?
23andMe is reportedly in the process of sending out breach notices to those impacted. When a company begins sending out data breach notices, it will typically come via email or mail. So, continue to monitor your inbox for the email address you used to sign up for 23andMe. Likewise, continue to monitor your mail in the coming weeks.
What is arbitration?
Arbitration is a private dispute resolution process. Your claim will not be filed in court. Your claim will be decided by an arbitrator, who is a neutral person chosen by you and the company. We can select an arbitrator for you who is fair and neutral.
Is arbitration confidential?
Yes, arbitration is a confidential, private process.

Explore our cases