Canadian courts have officially approved a US$3.25 million (approximately C$4.5 million) settlement for 23andMe customers affected by a data breach that compromised the personal information of nearly 320,000 Canadians. The Canadian court recognized the U.S. Chapter 11 Insolvency Court order on March 16, 2026, paving the way for eligible customers to file claims and receive compensation for their losses.
This settlement represents the first major court approval of 23andMe’s data breach compensation in Canada, and affected customers now have a limited window—until June 25, 2026—to submit their claim forms before the deadline expires. We’ll explain the data breach that triggered this settlement, walk through eligibility requirements, and address common questions about compensation and the claims process.
Table of Contents
- What Was Approved and When Did the Canadian Court Make Its Decision?
- How Many Canadians Were Affected and What Data Was Compromised?
- What Is the Maximum Compensation Per Claimant and How Much Will Legal Fees Reduce the Total?
- What Are the Exact Eligibility Requirements and How Do You Know If You Qualify?
- What Documents Do You Need to File a Claim and When Is the Deadline?
- How Is This Settlement Different From Other 23andMe Data Breach Claims?
- What Comes After the Claims Deadline and When Will You Receive Your Money?
- Frequently Asked Questions
What Was Approved and When Did the Canadian Court Make Its Decision?
On March 16, 2026, a Canadian court formally approved the 23andme settlement after recognizing the U.S. bankruptcy court order from February 17, 2026. This dual-court approval was necessary because 23andMe’s parent company is undergoing Chapter 11 insolvency proceedings in the United States, while the affected customers are scattered across multiple countries, including Canada. The Canadian court’s recognition of the U.S.
Order ensures that the settlement is binding in Canada and that the funds allocated for Canadian claimants are legally protected. The settlement process itself took months of negotiation between 23andMe, the company’s legal representatives, and class action counsel representing affected customers. Unlike some settlements that are announced and then challenged in court, this one received full court approval before the claims process opened, meaning the money is guaranteed and won’t be clawed back by bankruptcy creditors. For Canadian customers specifically, this approval cleared the final legal hurdle needed to begin accepting claim forms.
How Many Canadians Were Affected and What Data Was Compromised?
The 23andMe data breach exposed information from approximately 6.9 million customers worldwide, with nearly 320,000 of those being Canadian residents. The breach occurred between May 1 and October 1, 2023, a critical five-month window during which customer account information, including names, email addresses, and genetic ancestry data, was exposed to unauthorized access. The breach was discovered when customers reported suspicious account activity, and 23andMe eventually notified affected users via email.
However, not every Canadian customer affected by the breach automatically qualifies for compensation. The eligibility window specifically covers customers who held accounts during the May 1 to October 1, 2023 period, were residing in Canada at the time, received a breach notification from 23andMe, and did not opt out of the class action. This means that customers who created their accounts after October 2023 or those who actively excluded themselves from the class action are ineligible. Additionally, customers in provinces with different privacy regulations may face slightly different claim processes, though the settlement portal canadian23andmesettlement.ca provides province-specific guidance.
What Is the Maximum Compensation Per Claimant and How Much Will Legal Fees Reduce the Total?
Each eligible claimant can receive up to C$2,500, provided they have documented expenses directly resulting from the data breach. Documented expenses might include credit monitoring services purchased after learning about the breach, identity theft protection fees, or costs related to addressing identity fraud if it occurred. Not every claimant will receive the maximum amount; compensation depends on the nature and cost of damages you can substantiate through receipts, invoices, or other evidence.
The total settlement pool of C$4.5 million will be reduced by 33 percent to cover legal fees, court costs, and administration expenses. This means approximately C$3 million will be available for actual claimant compensation, reducing the maximum theoretical payout if every claimant submitted a C$2,500 claim. In practice, the average payout will likely be lower than the maximum because some claimants will have minimal documented expenses, and the total fund must be divided among all approved claims. The settlement administrator will also deduct a small percentage for claims processing costs.
What Are the Exact Eligibility Requirements and How Do You Know If You Qualify?
To qualify for the Canadian 23andMe settlement, you must meet four criteria: (1) you were a customer of 23andMe between May 1 and October 1, 2023; (2) you were a resident of Canada during that time period; (3) you received a breach notification from 23andMe in 2023 or early 2024; and (4) you did not opt out of the class action lawsuit. The easiest way to verify your eligibility is to visit the official settlement portal at canadian23andmesettlement.ca, where you can search for your name and account information to confirm your status. If you did not receive a breach notification email from 23andMe in 2023, you may still have been affected but are likely ineligible for this settlement.
Conversely, if you received the notification but later opted out, you cannot claim. Many customers who opted out did so under the mistaken belief that they would receive better compensation through separate litigation—a costly miscalculation, since no other lawsuits have resulted in Canadian settlements. If you’re uncertain about your eligibility, the settlement website provides a claim form that walks you through the verification process before you officially submit.
What Documents Do You Need to File a Claim and When Is the Deadline?
All claims must be submitted by June 25, 2026, at 11:59 pm Pacific Time—giving eligible claimants approximately three months from the court approval date to gather documentation and file. The claim form itself is available at canadian23andmesettlement.ca and requires you to provide your 23andMe account information, Canadian mailing address, and documentation of any damages incurred as a result of the breach. If you incurred credit monitoring expenses, for example, you’ll need to upload receipts; if you didn’t incur any documented costs, you can still claim, though your compensation will be lower.
One critical limitation to understand: if you miss the June 25 deadline, you forfeit your right to claim entirely. Unlike some settlements that have extended deadlines or allow late claims with court permission, this settlement has a firm cutoff. The settlement administrator does not accept claims submitted after 11:59 pm PT on June 25, 2026. If you’re still uncertain about your eligibility or have questions about which expenses qualify, contact the settlement administrator directly through the official website rather than waiting until the last moment, since processing delays are common during the final weeks of any claim deadline.
How Is This Settlement Different From Other 23andMe Data Breach Claims?
23andMe has faced multiple lawsuits and settlements across different countries and jurisdictions. The Canadian settlement is distinct because it was approved specifically for Canadian residents and processed through Canadian courts, even though it recognizes a U.S. bankruptcy order.
In the United States, 23andMe negotiated separate settlements with different state attorneys general and settled a federal class action, though those settlements took different forms—some were cash settlements, others involved non-monetary remedies like enhanced security measures. This Canadian settlement is one of the few instances where 23andMe has agreed to pay direct compensation to customers for the actual breach, rather than just providing credit monitoring services or security improvements. The C$2,500 maximum per person makes it more valuable than many settlements that cap payouts at a few hundred dollars. However, the settlement does not include any admission of wrongdoing by 23andMe, and the company’s statement on the settlement emphasizes that the agreement does not affect its bankruptcy proceedings or broader financial obligations to other creditors.
What Comes After the Claims Deadline and When Will You Receive Your Money?
Once the June 25, 2026 deadline passes, the settlement administrator will begin reviewing all submitted claims to verify eligibility and assess documented damages. This review process typically takes two to four months, depending on the complexity of claims and the volume submitted. Simple claims with clear receipts may be approved quickly, while claims involving multiple expenses or less conventional damages (such as costs related to identity fraud recovery) may require additional investigation or documentation.
Approved claimants will receive payment by check or electronic transfer, with the settlement administrator providing regular updates on the portal as claims are processed. The timeline means you can realistically expect to receive your compensation sometime between September and December 2026, or possibly later if a significant backlog develops. In the meantime, the settlement has no effect on your ability to pursue other remedies separately—for example, if you can prove identity theft directly caused by the breach, you may have additional legal recourse beyond this settlement, though pursuing such claims would require hiring a lawyer and is expensive and time-consuming.
Frequently Asked Questions
If I received a breach notification from 23andMe but didn’t experience any direct financial damage, can I still claim?
Yes. While the maximum compensation of C$2,500 is for claimants with documented expenses, you may be entitled to a base award even without receipts. The settlement administrator will determine a fair baseline for all eligible claimants to account for the inconvenience and risk posed by the breach itself. You should still file a claim rather than assume you will receive nothing.
Can I file a claim on behalf of a family member, spouse, or deceased relative?
Each person with an active 23andMe account during the May 1–October 1, 2023 window must file their own claim using their account information. For deceased relatives or those unable to file themselves, designated representatives or estate executors may be able to file on their behalf—contact the settlement administrator at canadian23andmesettlement.ca for guidance on power of attorney and estate-related claims.
What counts as a documented expense for the breach?
Documented expenses typically include credit monitoring subscriptions, identity theft protection services, credit report freezes or unfreezes, and out-of-pocket costs to address identity fraud (such as notarization costs, document replacement fees, or costs to dispute fraudulent accounts). Intangible harms like stress or inconvenience are not reimbursable, and ordinary credit card monitoring that you use for non-breach purposes will not be approved.
Will filing this claim affect my ability to pursue other legal action against 23andMe?
Filing a claim in this settlement releases 23andMe from liability for the data breach itself. However, it does not prevent you from suing separately if you can prove specific, additional damages not covered by the settlement—such as identity theft that resulted directly from the breach and caused demonstrable financial harm beyond what the settlement compensates. Pursuing such claims would require hiring a lawyer and is costly.
Can I claim if I’m a Canadian citizen living outside Canada, or a non-citizen living in Canada?
Eligibility is based on residence in Canada during May 1–October 1, 2023, not citizenship. If you were living in Canada during that window and held a 23andMe account, you qualify. If you are a Canadian citizen living abroad during the breach period, you do not qualify for this settlement, though you may be eligible for settlements in the country where you resided.
What happens if I submit a claim and it is denied?
If your claim is denied, the settlement administrator will provide written explanation of the reasons. You have the right to appeal the denial within a specified timeframe (typically 30-60 days) by submitting additional documentation or a written response. The settlement administrator’s appeal decision is generally final, and further appeals to the courts are available only in limited circumstances.
You Might Also Like
- Eye Physicians of Central Florida Data Breach Settlement Now Open for Claims
- Cardiovascular Consultants Data Breach Settlement Worth $3.85 Million Opens for Claims
- Canadians Can Now Claim Up to $2500 in 23andMe Privacy Settlement
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: