23andMe Reaches $18M Genetic Data Breach Settlement

More than 40 state attorneys general have reached an $18 million bankruptcy settlement with 23andMe over its 2023 breach, which exposed data affecting about 6.9 million customers. Investigators alleged deficient safeguards against credential-stuffing attacks, including the absence of multifactor authentication and inadequate monitoring. The settlement preserves deletion rights and adds security, risk-assessment, and oversight requirements as 23andMe's assets move under new ownership; a separate $46.75 million class-action settlement is intended to compensate eligible U.S. consumers.