Nebula Genomics Faces Class Action Over Alleged Genetic Data Sharing with Meta
A federal judge in Massachusetts has denied Nebula Genomics Inc.’s request to dismiss a proposed class action lawsuit accusing the DNA testing company of unlawfully sharing customers’ genetic data with Meta and other third parties. The case, Portillo v. Nebula Genomics, Inc. et al, centers on allegations that the company violated privacy laws by transmitting sensitive genetic information without proper consent.
The lawsuit claims Nebula Genomics embedded tracking tools, such as Meta’s Pixel, on its website, enabling the unauthorized transfer of user data to external platforms. Plaintiffs argue this practice breaches consumer trust and violates state and federal privacy regulations, including the Massachusetts Consumer Protection Act.
The ruling allows the case to proceed, signaling potential legal and financial consequences for Nebula Genomics if the allegations are proven. The outcome could set a precedent for how genetic testing companies handle user data, particularly in cases involving third-party tracking technologies. The case remains ongoing in the U.S. District Court for the District of Massachusetts.
Nebula Genomics cybersecurity rating report: https://www.rankiteo.com/company/nebula-genomics
"id": "NEB1773290018",
"linkid": "nebula-genomics",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Proposed class action '
'(unspecified number)',
'industry': 'Genetic Testing / Biotechnology',
'location': 'Massachusetts, USA',
'name': 'Nebula Genomics Inc.',
'type': 'Company'}],
'attack_vector': 'Third-party tracking tools (Meta Pixel)',
'data_breach': {'data_exfiltration': 'Shared with Meta and other third '
'parties',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (genetic and personal data)',
'type_of_data_compromised': 'Genetic data, personally '
'identifiable information'},
'description': 'A federal judge in Massachusetts has denied Nebula Genomics '
'Inc.’s request to dismiss a proposed class action lawsuit '
'accusing the DNA testing company of unlawfully sharing '
'customers’ genetic data with Meta and other third parties. '
'The lawsuit claims Nebula Genomics embedded tracking tools, '
'such as Meta’s Pixel, on its website, enabling the '
'unauthorized transfer of user data to external platforms. '
'Plaintiffs argue this practice breaches consumer trust and '
'violates state and federal privacy regulations, including the '
'Massachusetts Consumer Protection Act.',
'impact': {'brand_reputation_impact': 'Potential breach of consumer trust',
'data_compromised': 'Genetic data',
'identity_theft_risk': 'High (genetic data exposure)',
'legal_liabilities': 'Class action lawsuit, potential fines under '
'privacy regulations',
'systems_affected': 'Website tracking tools'},
'investigation_status': 'Ongoing',
'motivation': 'Alleged unlawful data monetization',
'post_incident_analysis': {'root_causes': 'Alleged unauthorized embedding of '
'third-party tracking tools (Meta '
'Pixel)'},
'references': [{'source': 'Federal court ruling (U.S. District Court for the '
'District of Massachusetts)'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit (*Portillo '
'v. Nebula Genomics, Inc. et al*)',
'regulations_violated': ['Massachusetts Consumer '
'Protection Act',
'Potential federal privacy '
'regulations']},
'title': 'Nebula Genomics Faces Class Action Over Alleged Genetic Data '
'Sharing with Meta',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized data sharing via embedded tracking '
'tools'}