On March 27, 2026, a Canadian court approved a $4.5 million class action settlement against 23andMe for a data breach that exposed customer information between May and October 2023. If you were a 23andMe customer in Canada during that period and received a data breach notification from the company, you have until June 25, 2026 to file a claim and receive compensation. The settlement process is straightforward: eligible individuals can file either an ordinary claim for a pro-rated share of the settlement fund or an extraordinary claim for reimbursement of documented out-of-pocket expenses up to CAD$2,500 if the breach directly caused you financial loss. This article covers everything you need to know about the claims process, including eligibility requirements, how much compensation is available, what documentation you’ll need, and the exact steps to submit your claim before the June 25 deadline.
Table of Contents
- What Is the 23andMe Canadian Privacy Settlement and Why Was It Approved?
- Who Is Eligible to Claim in the 23andMe Settlement?
- Understanding Settlement Amounts and Claim Types
- How to File Your Claim Before the June 25 Deadline
- Documentation and Evidence Requirements for Extraordinary Claims
- Payment Methods and Distribution Timeline
- Important Deadlines, Warnings, and What Happens After Claims Close
- Conclusion
What Is the 23andMe Canadian Privacy Settlement and Why Was It Approved?
In May 2023, 23andMe disclosed a data breach affecting customer accounts across Canada and other regions. The breach occurred because hackers gained unauthorized access to customer accounts and were able to download genetic and personal information from exposed profiles. The company notified affected customers in Canada and other jurisdictions, confirming that names, birth dates, ancestry results, and in some cases ethnic backgrounds and health information had been compromised.
Rather than fighting the lawsuit, 23andMe agreed to settle the class action claims brought by Canadian customers. The Canadian court approved this settlement on March 27, 2026, establishing a fund of US$3.25 million (converted to Canadian dollars for distribution to Canadian claimants). The settlement covers all Canadian residents who held active 23andMe accounts between May 1 and October 1, 2023, received the company’s data breach notification, and did not opt out of the class action. This represents a significant acknowledgment by 23andMe of the harm caused by the breach and provides compensation to those whose personal and genetic information was exposed.
Who Is Eligible to Claim in the 23andMe Settlement?
To qualify for compensation in the 23andMe Canadian Privacy Settlement, you must meet four specific criteria. First, you must have been a 23andMe customer between May 1, 2023 and October 1, 2023—the window during which the data breach occurred. This means customers who joined in April 2023 or after November 2023 are not eligible, even if they later learned about the breach. Second, you must have resided in Canada during that period, which the settlement administrator will verify through account information and IP address records. Third, you must have received a formal data breach notification from 23andMe regarding the exposure of your account.
The company sent these emails directly to affected customers; if you never received this notification, you were likely not included in the breach and therefore would not be eligible for compensation. Finally, you must not have actively opted out of the class action settlement. If you filed paperwork requesting to exclude yourself from the settlement, you cannot now claim compensation—however, if you took no action, you’re considered part of the settlement class by default. One important limitation: the settlement is limited to Canadian residents only. If you were living outside Canada when the breach occurred, even if your account was from a Canadian registration, you may not be eligible. Verify your residency status and account history before filing to avoid rejected claims.
Understanding Settlement Amounts and Claim Types
The 23andme Canadian settlement provides two different paths for claiming compensation, depending on your situation and what documentation you have available. The total fund available is approximately CAD$4.5 million when converted from the US$3.25 million settlement (the difference accounts for legal fees, administrative costs, and applicable taxes). Understanding which claim type applies to you is crucial because it determines how much compensation you might receive. An ordinary claim requires no documentation and is the simpler path for most claimants. If you file an ordinary claim, you receive a pro-rated share of the settlement fund—meaning the total available money is divided equally among all valid ordinary claimants. If 10,000 people file ordinary claims, you receive 1/10,000th of the remaining settlement fund. The exact amount per claim won’t be known until the deadline passes and the settlement administrator counts all claims, but early estimates suggest ordinary claims could range from CAD$200 to CAD$500 per person, though this depends on the total number of claims filed.
An extraordinary claim is for those who suffered direct financial losses from the breach. You can claim reimbursement for documented out-of-pocket expenses up to CAD$2,500 if you incurred these costs between October 1, 2023 and March 31, 2024 as a direct result of the breach. Examples include credit monitoring service subscriptions purchased after learning of the breach, identity theft insurance you bought, costs for replacing financial documents, fees from fraud alerts, or even lost wages if you took time off work to deal with identity theft issues. However, if you cannot provide receipts, invoices, or bank statements proving these expenses, your extraordinary claim will be denied—the settlement administrator requires hard documentation. A critical consideration: if you file an extraordinary claim and it’s approved, you receive the full amount of documented expenses up to CAD$2,500. You do not also receive an ordinary claim share. If your extraordinary claim is denied due to insufficient documentation, you will not automatically receive an ordinary claim—you must have filed both simultaneously, which the settlement website does not easily allow. This means filing an extraordinary claim carries some risk: if your documentation is incomplete or deemed insufficient, you could end up with nothing.
How to File Your Claim Before the June 25 Deadline
Filing your claim is handled entirely through the official settlement website at canadian23andmesettlement.ca. You cannot file claims through 23andMe’s regular customer service, your doctor, or third-party claim websites—you must use the official settlement portal to ensure your claim is processed correctly. The claims period opened on March 27, 2026, the same day the settlement was approved, so you’ve already been able to file since that date. To file an ordinary claim, visit the settlement website and enter your email address associated with your 23andMe account. The system will verify that you received the data breach notification and were part of the eligible class. If confirmed, you’ll answer a few basic questions confirming your Canadian residency during the claim period and that you did not opt out. The process typically takes 10-15 minutes, and you’ll receive immediate confirmation that your claim was submitted.
For an extraordinary claim, you’ll need to upload digital copies of your supporting documentation—credit card statements, receipts, invoices, insurance bills—alongside your claim form. Make sure your files are clear and legible; blurry or incomplete documentation will delay processing or result in denial. The June 25, 2026 deadline is firm and absolute. Claims submitted after 11:59 PM Pacific Time on that date will not be accepted, regardless of the reason. This means if you’re filing near the deadline, submit your claim at least 24 hours early to account for potential website delays or browser issues. Note that the deadline is in Pacific Time, not Eastern Time—if you’re in Eastern Canada, June 25 at 11:59 PM Pacific Time is actually 2:59 AM Eastern Time on June 26. Plan accordingly and do not wait until the final day.
Documentation and Evidence Requirements for Extraordinary Claims
If you’re filing for extraordinary compensation—the reimbursement for out-of-pocket expenses—the settlement requires specific types of documentation, and vague or partial evidence will result in denial. The key rule is that all expenses must be directly caused by the breach and incurred between October 1, 2023 and March 31, 2024. This means you cannot claim expenses from before the breach notification or more than six months after learning of the breach. For credit monitoring or identity theft insurance, you’ll need proof of purchase showing the date, amount, and that you bought it specifically because of the 23andMe breach. Bank statements, credit card statements, or PayPal receipts work well here. Do not submit just screenshots of account pages—the settlement requires documentation with transaction dates and amounts clearly visible.
For lost wages, provide a letter from your employer on company letterhead stating the dates you took off work and your hourly rate or salary, along with bank statements or pay stubs showing the income impact. For fraud-related expenses like credit report freezes or identity theft insurance, save receipts from the service provider clearly showing the breach-related purpose. A warning: the settlement administrator is skeptical of claims lacking clear documentation. They specifically reject claims where claimants submit vague descriptions like “I spent money on security because of the breach” without receipts. Similarly, they reject speculative damages—for example, you cannot claim CAD$500 for “stress and inconvenience” or “time spent dealing with the breach.” Only tangible, documented, reimbursable expenses count. If you’re unsure whether your expenses qualify, visit the settlement FAQ or contact the claims administrator at the phone number provided on canadian23andmesettlement.ca before submitting.
Payment Methods and Distribution Timeline
If your claim is approved, you’ll receive payment in Canadian currency through one of two methods: Interac e-transfer or cheque. When you file your claim, you’ll specify your preferred payment method. Interac e-transfer is faster and will be deposited into your nominated email-linked account, typically within 5-10 business days of claim approval. Cheques will be mailed to your address on file and typically arrive within 2-3 weeks of approval.
All payments will be distributed starting approximately 90 days after the June 25 claim deadline, meaning you should expect compensation to arrive sometime in late September or October 2026. The settlement administrator must first verify all submitted claims, process any extraordinary claim documentation, and then divide the remaining settlement fund among all approved ordinary claims. Do not expect payment immediately after you submit your claim—even approved claims must wait for the entire process to conclude before distribution begins. If you move before receiving your payment, make sure to update your address with the settlement administrator to avoid your cheque being returned undelivered.
Important Deadlines, Warnings, and What Happens After Claims Close
The June 25, 2026 deadline is the only significant date remaining in the settlement process, and it cannot be extended. Even if you discover you were eligible but missed the deadline by a day, you will not be able to claim compensation. There is no “late filing” option, no grace period, and no exceptions based on personal circumstances. Mark this date on your calendar now: June 25, 2026, 11:59 PM Pacific Time. One critical note: this settlement covers only Canadian residents and Canadian class action claims.
If you have related claims or concerns from other jurisdictions (such as if you were a 23andMe customer living in the United States when the breach occurred), those may be covered under separate U.S. class action settlements. The 23andMe data breach resulted in multiple lawsuits across different countries; make sure you understand which settlement applies to your specific situation. For U.S.-based claims, you would need to check separate U.S. settlement websites, not the Canadian portal. Finally, receiving compensation from this settlement does not waive your right to pursue other legal remedies—if you believe you suffered additional damages beyond this settlement’s scope, you may still have other legal options, though those would need to be pursued separately through your own legal counsel.
Conclusion
The 23andMe Canadian Privacy Settlement provides eligible customers with compensation for the May-October 2023 data breach. If you held a 23andMe account in Canada during that period and received the company’s data breach notification, you have until June 25, 2026 to file a claim for either a pro-rated share of the settlement fund or documented out-of-pocket expenses up to CAD$2,500. Filing is free and simple through the official settlement website at canadian23andmesettlement.ca.
To protect your claim: file well before the June 25 deadline, provide complete documentation if claiming extraordinary compensation, and verify you meet all eligibility criteria. Once the deadline passes, the settlement fund will be distributed to approved claimants starting in September 2026. Don’t miss this opportunity—check your email now for the original 23andMe data breach notification, visit the settlement website, and submit your claim.