XML 52 R19.htm IDEA: XBRL DOCUMENT v3.25.0.1
Commitments and Contingencies
9 Months Ended
Dec. 31, 2024
Commitments and Contingencies Disclosure [Abstract]  
Commitments and Contingencies Commitments and Contingencies
Non-cancelable Purchase Obligations
In the normal course of business, the Company enters into agreements containing non-cancelable purchase commitments for goods or services with various parties, which include agreements to purchase goods or services that are enforceable and legally binding to the Company. Recognition of purchase obligations occurs when products or services are delivered to the Company, generally within accounts payable, or accrued and other current liabilities. As of December 31, 2024, the Company had a total of $52.2 million in outstanding non-cancelable purchase obligations with a term of 12 months or longer that have not been recognized on its balance sheet.
Legal Matters
Cyber Incident
On October 10, 2023, the Company reported that certain information was accessed from individual 23andMe.com accounts without the account users’ authorization (the “Cyber Incident”).
As a result of the Cyber Incident, multiple class action claims have been filed against the Company in federal and state courts in California, as well as in other U.S. and international jurisdictions, and the Company has received demand letters from attorneys purporting to represent customers seeking arbitration claims. The Company is also responding to inquiries from various governmental officials and agencies. The federal class action claims were coordinated for pretrial proceedings by the Multidistrict Litigation Panel, and on June 5, 2024, co-lead plaintiffs’ counsel were appointed. On July 15, 2024, the Company reached an agreement in principle to settle the putative class action lawsuits currently pending in the U.S. District Court for the Northern District of California (the “Court”).
The parties executed a confidential settlement term sheet on July 29, 2024, which contemplated an aggregate cash payment by the Company of $30.0 million to settle all claims brought on behalf of all persons in the United States whose personal information was impacted by the Cyber Incident. In addition, the Company agreed to document various business practice initiatives relating to cybersecurity and provide customers with the option to enroll in a privacy and monitoring
service for three years. The Company subsequently reached an agreement with the plaintiffs on all material terms, including payment of $30.0 million (the “Settlement Agreement”). On September 12, 2024, plaintiffs filed a motion asking the Court for preliminary approval of the Settlement Agreement.
On December 4, 2024, the Court granted preliminary conditional approval of the Settlement Agreement under which the Company would agree to pay $30.0 million and implement certain remedial measures to resolve all claims by U.S. customers (who do not opt out) arising out of the Cyber Incident disclosed in October 2023. The Court’s order granting preliminary approval of the settlement was conditioned on the parties’ acceptance of certain modifications to the Settlement Agreement, including the exclusion from the settlement class of customers who have chosen to exercise their right to arbitrate, whether by making a demand for arbitration or by filing a formal complaint with the arbitral forum. Following the December 4, 2024 order, the parties have engaged in discussions regarding a potential settlement that would resolve all claims by U.S. customers, including those who choose to exercise arbitration rights. As of the filing date of this report, such discussions have not resulted in a revised settlement.
During the three months ended December 31, 2024, the Company incurred an additional $8.9 million in expenses related to the Cyber Incident, which is inclusive of an additional loss contingency that the Company believes is reasonably possible. The Company will continue to evaluate information as it becomes known, and it is possible that future results of operations or cash flows for any particular interim or annual period could be materially affected by unfavorable resolutions of this matter.
During the nine months ended December 31, 2024, the Company recognized $19.8 million in net expenses related to the Cyber Incident primarily consisting of $42.0 million in legal fees incurred and estimated loss contingencies, partially offset by probable insurance recoveries of $22.2 million, within general and administrative expense in the condensed consolidated statements of operations and comprehensive loss. As of December 31, 2024, the Company had $41.3 million of accrued expenses related to estimated loss contingencies and legal fees included in current liabilities, offset by $21.3 million of insurance recoveries included in prepaid and other current assets, in the condensed consolidated balance sheets.
Indemnification
The Company enters into indemnification provisions under agreements with other companies in the ordinary course of business, including, but not limited to, collaborators, landlords, vendors, and contractors. Pursuant to these arrangements, the Company agrees to indemnify, defend, and hold harmless the indemnified party for certain losses suffered or incurred by the indemnified party as a result of the Company’s activities. The maximum potential amount of future payments the Company could be required to make under these agreements is not determinable. As of the date of this filing, the Company has never incurred costs to defend lawsuits or settle claims related to these indemnification provisions. As a result, the Company believes that the fair value of these provisions is not material. The Company maintains insurance, including commercial general liability insurance and product liability insurance, to offset certain potential liabilities under these indemnification provisions. In addition, the Company indemnifies its officers, directors, and certain key employees against claims made with respect to matters that arise while they are serving in their respective capacities as such, subject to certain limitations set forth under applicable law, the Company’s Bylaws, and applicable indemnification agreements. As of December 31, 2024, the Company was not aware of any known events or circumstances that have resulted in a material claim related to these indemnification obligations.