Scott+Scott Attorneys at Law LLP, an international consumer rights litigation firm, is investigating whether 23andMe acted unlawfully by failing to protect users’ personal information.

23andMe has confirmed that customer profile information was accessed without authorization. Data associated with millions of profiles may be available for sale on a cybercrime forum, including raw profile data and data available through 23andMe’s “DNA Relatives” service, including data associated with users’ display name, profile photo, profile sex, birth year, location, predicted relationships to their match, the percent DNA match and number of shared genetic segments and portions of their genetic ancestry results, including haplogroups, which provide information about ancestry.

If you have used 23andMe’s “DNA Relatives” service and are concerned about the unlawful disclosure of your personal information, you are encouraged to reach out to Scott+Scott to learn more about your legal rights.