AD
Privacy Commissioner of Canada Philippe Dufresne, left, and UK Information Commissioner John Edwards hold a press conference at the National Press Theatre in Ottawa on June 17, 2025. The Canadian Press/Sean Kilpatrick
|Updated:
DNA testing firm 23andMe has been fined more than $4 million for failing to ensure that sufficient security measures were in place to protect customers’ personal information, which led to a global data breach in 2023, according to a joint investigation carried out by Canada and UK privacy officials.
The joint investigation was conducted by the Office of the Privacy Commissioner of Canada (OPC) and the United Kingdom Information Commissioner’s Office (ICO) after a cyber attack affected nearly 7 million 23andMe customers worldwide, including almost 320,000 Canadians and 155,600 people in the UK.
