Canadians almost out of time to claim up to $2,500 in data breach settlement
Canadians are running out of time to claim a chunk of a huge data breach settlement.
Those who have used 23andMe to trace their family ancestry could be eligible to cash in on the years-long data breach class-action lawsuit against the genetic testing company.
In March, Toronto-based law firm KND Complex Litigation published a notice alerting affected Canadians that they have until June 25, 2026, to claim part of the settlement worth US$3.25 million (around C$4.5 million).
The class action was filed in October 2023 after 23andMe identified and disclosed a data breach that allegedly exposed users’ highly sensitive and valuable personal information.
nevodka/Shutterstock
The DNA testing company revealed in December that year that hackers accessed data of nearly 6.9 million users in total.
“The action alleges that contrary to their promises, statements and representations, as well as the privacy regulation and industry standards applicable to them, the defendants did not introduce, implement or maintain proper or adequate data retention and data protection practices,” reads the lawsuit.
The lawsuit further alleges the company violated its own standards and that the breach was the result of careless and reckless handling of highly sensitive customer data.
In September 2025, both parties agreed on the C$4.5-million settlement, which would also cover legal fees, expenses, and applicable taxes.
Who’s eligible for the 23andMe settlement?
nevodkaz/shutterstock
To be eligible to claim a part of the settlement, you must be a Canadian resident and have been a 23andMe customer between May 1, 2023, and Oct. 1, 2023, which was the time of the cybersecurity incident.
Canadians can also file a claim if they received a notice from the company alerting customers that their personal information was compromised. The settlement only covers customers who didn’t opt out of the class-action settlement.
How do you file a claim, and how much could you receive?
Erman Gunes/Shutterstock
Eligible Canadians could receive compensation through two types of claims.
The first one is the eligible extraordinary claims. If you have documentation to prove that you incurred out-of-pocket expenses between Oct. 1, 2023, and March 31, 2024, due to the security breach, you can receive up to C$2,500. Associated costs can include any purchase of a physical security or monitoring system, seeking professional mental health counselling or treatment, or other related expenses.
The second is the eligible extraordinary claims, which are a pro-rated share. You can file a claim without providing additional information or documentation.
According to the claims website, payments will be made in Canadian dollars. If you meet the eligibility requirements, you’ll instantly be considered for compensation as long as you fill out a claims form.
Claims forms can be found on the settlement website and can be submitted by mail, email, fax, or through the site. The deadline to submit a claim is about a week away on June 25, 2026, at 11:59 p.m. PDT, so don’t procrastinate!
You’ll need to provide your personal details, contact information, the type of claim that you qualify for, supporting documents if required, and the method of payment you prefer.
With files from Irish Mae Silvestre