23andMe has agreed to pay $30 million to settle a lawsuit stemming from a data breach that compromised the personal information of 6.9 million customers. The settlement includes financial compensation for affected customers and offers three years of security monitoring. The breach, which occurred over five months starting in April 2023, involved unauthorized access to customer data, with particular concern for those with specific ancestries. 23andMe has cited its precarious financial position and expects a significant portion of the settlement cost to be covered by cyber insurance.
