If you were one of the millions of people affected by the 23andMe data breach, you may be eligible for a portion of a $30 million settlement. This legal agreement follows a significant security incident where unauthorized parties accessed personal information from user profiles. Navigating the claims process can seem daunting, but it is a straightforward way to seek compensation for the compromise of your private data.
Understanding the 23andMe Data Breach Settlement
In October 2023, 23andMe announced that a data breach had occurred through a technique known as credential stuffing. This involves hackers using login information stolen from other websites to gain access to 23andMe accounts. Once inside, the attackers were able to view sensitive information from millions of profiles, particularly those who had opted into the “DNA Relatives” feature.
The information accessed included names, birth years, relationship labels, and ancestry reports. In response to several class-action lawsuits, 23andMe agreed to a $30 million settlement to resolve claims regarding their security practices. This fund is intended to reimburse users for financial losses and provide ongoing security monitoring.
Who is Eligible to File a Claim?
To receive benefits from the settlement, you must be a member of the “Settlement Class.” Generally, this includes any individual residing in the United States whose personal information was accessed or potentially accessed during the data breach that occurred in late 2023.
You may have received an email or a physical notice containing a Unique ID and PIN. This information confirms your eligibility and makes the filing process much faster. However, even if you did not receive a notice, you can still submit a claim if you believe your account was compromised during the relevant period.
Specific Groups Targeted
While the breach affected a broad range of users, specific groups were targeted more heavily. This includes users of Ashkenazi Jewish and Chinese ancestry. If you belong to these groups and were a 23andMe user at the time of the breach, it is highly likely that your data was involved in the incident.
Available Benefits for Claimants
The settlement offers several types of relief depending on how the breach impacted you. Understanding these options will help you decide how to fill out your claim form accurately.
- Cash Payments: Eligible class members can receive a standard cash payment. The exact amount depends on the total number of claims filed, but it is intended to provide a baseline for the inconvenience of the breach.
- Extraordinary Expense Reimbursement: If you suffered significant financial losses due to identity theft or fraud directly related to this breach, you can claim up to $10,000. This requires detailed documentation, such as bank statements or police reports.
- Privacy Protect Services: All eligible class members are entitled to three years of “Privacy Protect” monitoring services. This service helps track your personal information online and alerts you to potential identity theft risks.
- California Resident Bonus: Due to specific privacy laws in California, residents of that state may be eligible for an additional modest payment on top of the standard settlement amount.
How to File a Claim Step-by-Step
Filing a claim is done through the official settlement website. It is important to complete the process before the court-ordered deadline to ensure you do not lose your right to compensation.
Step 1: Locate Your Unique ID
Check your email for a message regarding the “23andMe Data Breach Settlement.” This email should contain a Unique ID and a PIN. Having these ready will allow the system to automatically pull your account details, saving you time and reducing the risk of errors.
Step 2: Access the Online Claim Form
Navigate to the official settlement portal. Look for the button labeled “Submit a Claim.” You will be prompted to enter your Unique ID and PIN. If you do not have these, there is typically an option to manually enter your contact information to verify your identity.
Step 3: Select Your Benefits
The form will ask whether you wish to receive the cash payment, the monitoring service, or both. If you are claiming extraordinary losses, you will be directed to a separate section where you must upload your supporting documents. Ensure all files are clear and legible.
Step 4: Verify Your Identity and Submit
You will need to provide your current mailing address and choose a payment method. Many settlements now offer digital payment options like PayPal, Venmo, or direct deposit, in addition to traditional paper checks. Once you have reviewed your information, sign the form electronically and submit it.
Important Deadlines to Remember
Legal settlements operate on strict timelines. If you miss a deadline, you will not be able to participate in the settlement or receive any money. The primary deadline for filing a claim is November 6, 2024. This is the date by which your online submission must be completed or your paper claim must be postmarked.
There is also a deadline for opting out of the settlement. If you wish to sue 23andMe individually for the data breach, you must formally exclude yourself from the class action. Doing so means you will not receive any money from this settlement, but you retain your right to pursue your own legal case.
Documenting Extraordinary Losses
If you are applying for the $10,000 reimbursement for extraordinary losses, you must be prepared to prove that the loss was a direct result of the 23andMe breach. This is a higher bar of evidence than the standard claim.
What Counts as Documentation?
Valid documentation includes correspondence with banks regarding fraudulent charges, receipts for credit monitoring services you purchased yourself, or legal fees associated with identity restoration. You should also include a written explanation of how the 23andMe breach led to these specific issues. The settlement administrator will review these claims individually to determine if they meet the criteria for reimbursement.
Protecting Your Data After a Breach
While the settlement provides financial relief, it is equally important to take proactive steps to secure your digital identity. Data breaches are becoming more common, and being prepared can prevent future incidents.
- Enable Multi-Factor Authentication (MFA): Always use MFA on sensitive accounts, especially those containing health or genetic data. This requires a second form of verification, such as a code sent to your phone, making it much harder for hackers to get in.
- Change Compromised Passwords: If you used the same password for 23andMe as you do for other sites, change those passwords immediately. Use a password manager to create unique, complex passwords for every service you use.
- Monitor Your Credit: Keep a close eye on your credit reports for any unauthorized accounts or inquiries. Even if you take the settlement’s monitoring service, it is wise to check your reports manually at least once a year.
Conclusion
Taking the time to file a claim for the 23andMe data breach settlement is a vital step in holding companies accountable for data security. By following the steps outlined above, you can ensure that you receive the compensation and protection you deserve. Remember to gather your documentation and submit your claim before the November deadline to stay eligible for all available benefits. For more information on protecting your digital life and navigating online services, explore our other helpful articles on technology and security.