Ancestry and genetics-testing company 23andMe has agreed to pay a $30 million settlement after a class-action lawsuit was brought against the company for last year's data breach.
The settlement, which is pending a judge's approval, comes after the company confirmed in October that "threat actors" used about 14,000 accounts, approximately 0.1% of the company's user base
Leaked data included users' account information, location, ancestry reports, DNA matches, family names, profile pictures, birthdates and more.
While 23andMe confirmed the existence of the breach in October, it did not reveal the full extent of the issue until December.
A class-action suit was filed in San Francisco the following month, accusing 23andMe of failure to amply protect users' personal information.
It also accused 23andMe of neglecting to notify certain users that data from people with Chinese or Ashkenazi Jewish heritage appeared to be targeted in the breach.
The class-action lawsuit filed in January accuses 23andMe of inadequately protecting user data and failing to notify affected parties in time, among other complaints.
Terms of the settlement include payment to those affected by the security incident to cover expenses like those incurred fighting identity theft, installing physical security systems, or seeking mental health treatment