Genetic testing company 23andMe has agreed to pay $30 million to settle a class action lawsuit regarding a 2023 data breach that compromised the personal data of millions of users.

The lawsuit accused the company of inadequate data protection and delayed notification of the breach, although 23andMe denied wrongdoing as part of the settlement.

The agreement is pending judicial approval, with around $25 million expected to be covered by cyber insurance.

The breach, which became public in December 2023, affected approximately 6.9 million users, with some of their profile information, including names and birth years, appearing on the dark web, Fox Business has reported.

The hackers gained access by exploiting reused usernames and passwords from other compromised sites.

Written by B.C. Begley