23andMe data breach class action lawsuit overview:
- Who: Monica Santana and Paula Kleynburd filed a class action lawsuit against 23andMe Inc.
- Why: Santana and Kleynburd claim 23andMe failed to secure and safeguard sensitive information entrusted to it by its customers, during a data breach it announced earlier this month.
- Where: The class action lawsuit was filed in California federal court.
DNA testing firm 23andMe failed to secure and safeguard the sensitive information entrusted to it by its customers during a data breach that the company announced via its website earlier this month.
Plaintiffs Monica Santana and Paule Kleynburd claim 23andMe owed a “non-delegable” duty to its customers to “implement and maintain reasonable and adequate security measures” so as to safeguard and protect their private information against unauthorized access and disclosure.
Santana and Kleynburd argue 23andMe attempted to redirect blame for the data breach to the criminal actors who gained access to its customer accounts, rather than mentioning that their safeguards were “inadequate.”
“The Data Breach was a direct result of Defendant’s failure to implement adequate and reasonable cyber-security procedures and protocols necessary to protect victims’ (personally identifiable information,” the 23andMe class action states.
Santana and Kleynburd want to represent a nationwide class of individuals who had their private or personally identifiable information compromised during the 23andMe data breach.
23andMe data breach exposed customer names, sex, birthdates, other personal information, says class action
The 23andMe data breach exposed the names, sex, birthdates, genetic ancestry results, profile photos, and geographical location of its customers, according to the 23andMe class action.
Santana and Kleynburd argue 23andMe customers affected by the data breach are faced with a “present and imminent threat” of fraud and identity loss, among other things, on account of their information being compromised in the data breach.
“Defendant maintained the PII in a reckless manner. In particular, the (personally identifiable information) was maintained on Defendant’s computer network in a condition vulnerable to cyberattacks,” the 23andMe class action states.
Santana and Kleynburd claim 23andMe is guilty of unjust enrichment, negligence, breach of implied contract, and invasion of privacy via inclusion upon seclusion.
The plaintiffs are seeking declaratory and injunctive relief along with an award of compensatory, statutory, punitive, and actual damages for themselves and all class members.
In another case involving 23andMe, the company agreed to a class action settlement back in 2017 that resolved claims it unlawfully misrepresented its products and services.
Were you affected by the 23andMe data breach? Let us know in the comments!
The plaintiffs are represented by Scott Edelsberg of Edelsberg Law, P.A., and Andrew J. Shamis of Shamis & Gentile, P.A.
The 23andMe data breach class action lawsuit is Santana, et al. v. 23andMe Inc., Case No. 3:23-cv-05147, in the U.S. District Court for the Northern District of California.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
- Caesars class action alleges casino failed to properly protect customer information before data breach
- Judge consolidates 7 class actions over Progressive data breach
- IBM, Johnson & Johnson class action claims companies failed to safeguard protected health information
- Ransomware group claims to have hacked all of Sony systems
397 thoughts on23andMe class action alleges data breach compromised customer info
Please me to this lawsuit.
Please add me and my daughter to this lawsuit. She is of Jewish heritage that was directly targetted by this data breach.
Please include me in this lawsuit. This is very disturbing.
I received two letters from 23andme stating I was hacked and everyone associated with me was hacked. I am not sure of future damages that I may endure due to this hack however: I am putting safeguards in place. Please include me in this class action suit.
Please add me, I received an email that I was also affected by this data breach from 23andme
How do I get added into a class action? My data was compromised.
Please add me to the 23andme lawsuit
Add me
Yes
I just found out my account was compromised. I wish to be added to the law suit
I’m glad to see that others are as angry as I was after receiving communication from 23andme that blamed ME, as their customer, for their failure to protect my information. Never have I seen such a lack of corporate accountability greater than the one that they continue to perpetuate. With every subsequent email that I receive, it becomes more clear that they have no remorse whatsoever. I’m not sure how someone recovers from having so much of their personal data exposed? The harm that I can experience could go on for decades to come.
Please add me I got the email!
Please add me I got two emails