"23andMe Takes Preemptive Action to Protect Itself from Data Breach Lawsuits"

Genetic testing provider 23andMe, facing lawsuits over a data breach, has updated its Terms of Use to require mandatory arbitration for all disputes, rather than allowing jury trials or class action lawsuits. The breach, which impacted 6.9 million people, involved threat actors using credential stuffing attacks to access customer accounts and scrape data. However, legal experts suggest that the updated terms may not protect 23andMe from lawsuits, as it may be difficult to prove that users were given reasonable notice to opt out of the new terms.