Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 12:00 PM EST
23andMe Faces Genetic Breach Fallout
Coverage from SecurityWeek, Reuters, and others
Articles
227
Active Days
76
The Topic
The topic is dominated by the continuing legal and financial fallout from 23andMe’s 2023 credential-stuffing breach, which exposed genetic, ancestry, health-related, and relative information belonging to millions of customers. State regulators, courts, bankruptcy proceedings, and private claimants are pursuing settlements, fines, data-protection requirements, and other remedies, while separate incidents show how breached information can enable fraud and trigger disputes over liability. The material also highlights uncertainty over the scope of monetary recovery and the effectiveness of existing security safeguards.
First Article: 05/14/26
Latest Article: 07/28/26
Summary
- 23andMe’s 2023 breach exposed genetic, ancestry, health-related, and family-relationship information tied to approximately 6.9 million customers.
- Settlements and bankruptcy proceedings are distributing tens of millions of dollars to U.S., Canadian, and arbitration claimants.
- State attorneys general allege that basic protections against credential-stuffing attacks, including multifactor authentication and monitoring, were inadequate.
- California’s enforcement options remain contested: a bankruptcy judge blocked monetary damages but left potential non-monetary relief available.
- The breach fallout includes scrutiny of data sales, consumer deletion rights, asset transfers, and privacy protections during corporate restructuring.
- Separate cases link cyber incidents to direct financial fraud and test how privacy statutes apply to breach claims.
History
The story now centers more tightly on the 23andMe breach’s continuing legal and bankruptcy fallout, with clearer detail on the types of data exposed and the contested limits of monetary recovery in California. It also broadens to explicitly include fraud-enabled losses and additional privacy disputes around data retention, transfer, and deletion rights.
The story now places 23andMe more explicitly inside ongoing multistate enforcement and bankruptcy court proceedings, while sharpening the broader legal theme around how courts and regulators assess security controls and breach remedies. It also reframes the set of cases as part of a wider pattern of fragmented breach litigation, settlements, and fraud losses across sectors.
Featured
07-23-2026
Upbound Group reported a 2026 Acima cybersecurity incident and data breach after hackers obtained customer information used in fraudulent lease-to-own contracts.
05-28-2026
Rob Bonta sued 23andMe in San Francisco Superior Court in 2026 over a 2023 breach exposing genetic and other personal data for millions of customers.
07-10-2026
U.S. Bankruptcy Judge Brian Walsh ruled in St. Louis that California cannot seek damages against Chrome Holding Co. over a 2023 23andMe genetic data breach affecting about 6.9 million customers.
Timeline: 76 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
43 U.S. attorneys general and 23andMe settled genetic data breach claims after investigators found credential-stuffing attacks went undetected for months in 2023.
Chrome Holding Co agreed in US Bankruptcy Court to pay 46.7 million dollars to US claimants over a 2023 genetic data breach while California jurisdiction is pending.
Rob Bonta sued Chrome Holding Co. in California over a 2023 breach allegedly exposing millions of users' genetic data through credential stuffing and the DNA Relatives feature.
Delaware and Maryland attorneys general, with support from 39 other states, announced a settlement resolving enforcement actions after the 2023 23andMe genetic data breach.
Rob Bonta filed a civil lawsuit in San Francisco Superior Court in the 2020s accusing Chrome Holding Co. of insufficient security after a 2023 23andMe breach exposed nearly seven million users.
A Missouri bankruptcy court administrator approved a $46.8 million settlement fund in the 2023 23andMe genetic data breach case.
In the US, 42 state attorneys general reached an $18 million settlement with 23andMe in response to an October 2023 breach exposing genetic ancestry data.
New Hampshire Attorney General John M. Formella announced a $187,490 share of a 42-state settlement with 23andMe over a 2023 genetic data breach.
California Attorney General Rob Bonta sued 23andMe in the 2020s over a 2023 genetic data breach, alleging inadequate security, delayed detection, and misleading customer messaging.
Rob Bonta sued 23andMe in San Francisco Superior Court in 2024, alleging inadequate safeguards after a 2023 genetic data breach exposed millions of customers.
Georgia Attorney General Chris Carr joined other attorneys general in settling with the 23andMe estate over the 2023 genetic testing data breach, with Georgia set to receive over $452,000.
Chrome Holding Co. bankruptcy plan administrator agreed in 2026 to pay $46.75 million for class-action claims tied to a 2023 23andMe genetic data breach.
On July 7, U.S. Bankruptcy Judge Brian Walsh approved a $46.75 million 23andMe settlement in St. Louis after a 2023 breach exposed genetic data for about 6.9 million customers.
California Attorney General Rob Bonta sued Chrome Holding Co. in San Francisco over alleged security failures in a 2023 breach exposing ancestry and genetic data sold on the dark web.
In a multistate action, 42 U.S. attorneys general settled with 23andMe for $18 million after a 2023 credential-stuffing breach exposed genetic data of 6.9 million people.
After a 2023 genetic data breach, 23andMe reached an $18 million settlement with 42 state attorneys general in 2025, with Pennsylvania and New Jersey receiving specific payments.
23andMe reached an $18 million settlement with 42 state attorneys general after unauthorized access exposed millions of users' genetic and family-relationship data.
More than 40 U.S. attorneys general announced a Tuesday 18 million settlement with 23andMe after a 2023 genetic data breach exposed DNA Relatives and family-tree related account information.
California Attorney General Rob Bonta sued 23andMe in San Francisco Superior Court in response to a 2023 genetic data breach affecting about 6.9 million U.S. customers.
Bankruptcy court approved a $46.75 million settlement for 23andMe users after a 2023 breach exposed genetic data, while California Attorney General enforcement continues.
In bankruptcy court, Chrome Holding was ordered in 2023 DNA breach settlement payments totaling about $47 million, including $46.75 million to victims.
California Attorney General Rob Bonta sued 23andMe in 2026 over a 2023 breach exposing genetic and health data of about 6.9 million customers.
Chrome Holding, under TTAM Research Institute, was ordered in California bankruptcy court in 2024 to pay $46.75m to 23andMe 2023 genetic breach victims.
A California bankruptcy court ruled in favor of 23andMe genetic breach victims, ordering Chrome Holding to pay $46.75 million after the 2023 incident and related investigations.
Jeff Jackson announced a multistate settlement with 23andMe on July 14, 2026 for a 2023 credential-stuffing breach exposing genetic ancestry data.
Attorney General Rob Bonta announced a California lawsuit against Chrome Holding Co over a 2023 breach of genetic and ancestry data that expanded through DNA Relatives scraping.
Louisiana Attorney General Liz Murrill said Louisiana will receive $258,668 from a multistate settlement over a 2023 23andMe genetic data breach.
Alabama Attorney General Steve Marshall said the state will receive $260,817 from a multistate settlement over a 2023 23andMe breach exposing genetic data.
A coalition of 42 US attorneys general settled with 23andMe in 2025 for $18m over a 2023 breach that exposed genetic ancestry data through credential stuffing.
Utah and a coalition of states announced an $18 million settlement in 23andMe bankruptcy proceedings after a 2023 breach exposed genetic and identity data.
Arkansas Attorney General Tim Griffin announced a proposed multistate 23andMe settlement over a 2023 genetic data breach, pending bankruptcy court approval in August.
Forty-two states settled with 23andMe in 2025-2026 over a genetic data breach affecting about 6.9 million Americans, including an Arkansas payment and a $46.75 million class settlement.
Arkansas Attorney General Tim Griffin announced a multistate settlement in 2025 with 23andMe over a 2023 genetic-data breach affecting more than 48,000 Arkansans.
Arkansas Attorney General Tim Griffin announced an $18 million 23andMe settlement covering a 2023 data breach affecting more than 48,000 Arkansans.
Rob Bonta filed suit in San Francisco Superior Court against Chrome Holding Co., formerly 23andMe, over a 2023 genetic data breach affecting millions of users.
23andMe bankruptcy proceedings in Missouri court approved a $46.75 million class-action settlement linked to a 2023 genetic data breach affecting millions of customers.
Brian Walsh approved a $46.75 million settlement in bankruptcy court for 23andMe breach victims after a 2023 genetic data incident.
Brian Walsh approved a 23andMe settlement in St. Louis in 2025 after a 2023 hack exposed genetic and other personal data for about 6.9 million customers.
Arizona and 42 states settled with 23andMe in 2025 over a 2023 breach that exposed customers genetic ancestry data, including 143,000 Arizona users.
Delaware and other U.S. attorneys general settled a lawsuit over 23andMe's 2023 genetic data breach, and later bankruptcy events prompted deletion recommendations.
Andrea Joy Campbell and 42 state attorneys general announced an $18 million settlement over a 23andMe 2023 breach exposing genetic ancestry data.
Delaware AG Kathy Jennings announced a settlement with 23andMe bankruptcy trustee over a 2023 genetic-data breach affecting 6.9 million customers worldwide.
Delaware Attorney General Kathy Jennings cited a 2023 23andMe breach that exposed genetic data, leading to a $160,000 settlement and deletion guidance after 2025 bankruptcy.
Charity Clark joined a 42-state coalition in announcing an $18 million settlement with 23andMe after a 2023 breach exposed customers genetic data, including Vermont residents.
Colorado Attorney General Phil Weiser said Colorado joined a multistate settlement with the 23andMe bankruptcy trustee over a 2023 genetic data breach affecting 6.9 million customers worldwide.
In Washington, 42 attorneys general announced a settlement with the 23andMe bankruptcy trustee over a 2023 genetic data breach affecting more than 220,000 customers.
In Pennsylvania, Attorney General Dave Sunday joined a 42-state coalition in announcing settlements with 23andMe over a 2023 genetic data breach affecting 6.9 million consumers.
42 state attorneys general and 23andMe reached an $18 million settlement in 2025 over an October 2023 genetic data breach affecting about 6.9 million customers.
New York Attorney General Letitia James and 42 other attorneys general settled with 23andMe in 2025 over an October 2023 breach exposing genetic data later sold online.
North Carolina will receive $666,242 from an $18 million multistate settlement over a 2023 23andMe credential-stuffing breach that exposed customers genetic and personal data.
Michigan Attorney General Dana Nessel joined 42 attorneys general in a bankruptcy settlement over 23andMe genetic data breach exposure affecting millions, including Michigan residents.
Iowa Attorney General Brenna Bird announced an $18 million multistate settlement with 23andMe after a 2023 genetic data breach exposed 6.9 million customers.
Pennsylvania Attorney General Dave Sunday joined a 42-state coalition in an $18 million bankruptcy settlement with 23andMe over a 2023 genetic data breach affecting 6.9 million consumers.
Tennessee Attorney General Jonathan Skrmetti joined a 43-attorney general coalition to settle a 23andMe 2023 breach with exposure affecting Tennessee residents.
Louisiana Attorney General Liz Murrill announced a multistate settlement tied to a 2023 23andMe genetic data breach affecting 68,814 Louisiana customers.
Georgia Attorney General Chris Carr announced a multistate settlement with the 23andMe bankruptcy trustee tied to a 2023 genetic data breach affecting Georgia residents.
A multistate coalition led by Attorney General Liz Murrill announced a bankruptcy settlement with 23andMe over a 2023 genetic-data breach affecting 6.9 million people.
Vermont, New Hampshire, and New York plan settlement payments tied to 23andMe’s 2023 genetic data breach after data appeared for sale on the dark web.
Illinois announced a multistate settlement with 23andMe’s bankruptcy trustee tied to an October 2023 genetic data breach affecting 6.9 million customers worldwide.
North Dakota and Minnesota attorneys general joined a proposed $18 million settlement over a 2023 23andMe breach exposing genetic data of 6.9 million customers, with court review set for August 10.
Louisiana Attorney General Liz Murrill said Louisiana will receive $258,668 from a 23andMe settlement after a 2023 breach compromised genetic data.
Oklahoma Attorney General Gentner Drummond announced a $276,435 payout to Oklahomans under a multistate $150 million 23andMe settlement tied to a 2023 data breach.
Oklahoma Attorney General Gentner Drummond announced a $276,435 multistate settlement tied to 23andMe's 2023 genetic data breach affecting Oklahomans and millions nationwide.
Louisiana Attorney General Liz Murrill announced a multistate settlement resolving 23andMe bankruptcy claims after a 2023 breach exposed customers' personal and genetic data.
Alabama will receive more than $260,000 from a 42-state settlement over 23andMe’s October 2023 genetic data breach affecting 6.9 million customers.
Kwame Raoul announced a multistate settlement with the 23andMe bankruptcy trustee over a 2023 breach exposing genetic data for 6.9 million customers worldwide.
Connecticut Attorney General William Tong and a coalition of 42 attorneys general announced a settlement with 23andMe's bankruptcy trustee over a 2023 breach exposing genetic data.
Pennsylvania Attorney General Dave Sunday and 42 states announced an $18 million settlement with 23andMe in 2024 over a breach exposing genetic data first discovered in October 2023.
Michigan Attorney General Dana Nessel reported a multistate settlement stemming from 23andMe’s 2023 breach will deliver $436,605 to Michigan from bankruptcy proceeds.
Texas Attorney General Ken Paxton secured a multistate settlement from 23andMe for a 2023 breach exposing genetic data of 6.9 million customers worldwide.
Kentucky Attorney General Russell Coleman announced Kentucky will receive $259,375 from a $150 million 23andMe breach settlement affecting 69,188 residents.
Kentucky Attorney General Russell Coleman announced payments for Kentucky residents affected by 23andMe’s 2023 genetic data breach under a multistate settlement with the U.S. Bankruptcy Trustee in the 2025 bankruptcy process.
Russell Coleman announced a $259,375 Kentucky settlement payment tied to a 2023 23andMe breach affecting genetic ancestry data for Kentucky residents.
Kansas Attorney General Kris Kobach announced an $18 million multistate settlement against 23andMe after a 2023 cyberattack exposed genetic data, including data from Kansans.
Kansas will receive about $225,814 from a multi-state $18 million settlement with 23andMe after a 2023 breach exposed genetic ancestry data.
41 states and the District of Columbia reached an $18 million settlement with Chrome Holding Co. and 23andMe after a 2023 breach allegedly exposed data tied to 6.9 million customers.
Virginia attorneys general, led by Jay Jones, announced a multistate settlement with 23andMe's bankruptcy trustee after a 2023 genetic data breach disclosed in October 2023.
Utah officials announced a $461,688 share of an $18 million multistate settlement with 23andMe after a 2023 breach exposed genetic and ancestry data.
Forty-two state attorneys general settled $18 million of bankruptcy claims against 23andMe in connection with a 2023 genetic data breach disclosed in October 2023.
Arkansas Attorney General Tim Griffin announced a 431,937 payment from 23andMe as part of a 42-state settlement after a genetic ancestry data breach.
Rob Bonta filed a California lawsuit against 23andMe in 2024 alleging security failures behind a 2023 genetic data breach affecting about 7 million customers.
Dana Nessel announced a settlement between Michigan, 42 other states, and the 23andMe bankruptcy trustee over a 2023 genetic data breach and alleged dark web exposure.
In the U.S., 23andMe and 42 attorneys general announced an 18 million settlement in 2025 over a 2023 genetic data breach affecting about 6.9 million users.
Forty-two state attorneys general settled with 23andMe's bankruptcy trustee for an 18 million dollar breach resolution over 6.9 million exposed customer records from 2023.
Russell Coleman announced July 20, 2026 that Kentucky residents affected by the 23andMe 2023 genetic data breach will receive $259,375 in immediate settlement payments via a U.S. Bankruptcy Trustee.
Kansas and Kentucky attorney generals announced settlement payments from 23andMe for a 2023 genetic data breach discovered in October 2023.
Louisiana AG Liz Murrill’s office joined 42 states in settling with 23andMe’s bankruptcy trustee over a 2023 breach of genetic data for 6.9 million customers.
California Attorney General Rob Bonta filed a 2023-genetic-breach lawsuit against 23andMe in California, alleging insecure systems, credential stuffing exposure, and dark-web sale of genetic data.
U.S. bankruptcy judge Brian Walsh approved a 46.75 million settlement for 23andMe breach victims on July 7, as California Attorney General Rob Bonta pursued civil fines in San Francisco.
Wisconsin will receive more than 275,000 dollars in a multistate settlement with 23andMe's bankruptcy trustee over a 2023 genetic data breach announced in October 2023.
Minnesota and North Dakota attorneys general joined a multistate $18 million settlement over a 23andMe October 2023 genetic-data breach affecting 6.9 million customers worldwide, pending court approval.
Wisconsin Department of Justice reports a 2023 23andMe breach settlement will pay the state over $275,000 for exposure of genetic ancestry data.
Jonathan Skrmetti joined 43 attorneys general in settling state claims with the 23andMe bankruptcy trustee for the 2023 genetic data breach, including recovery for Tennessee customers.
Arkansas Attorney General Tim Griffin announced an $18 million multistate settlement with 23andMe for a 2023 breach affecting 6.9 million consumers, including 48,000 Arkansans.
Arkansas Attorney General Tim Griffin announced 23andMe settlement with 42 states for a 2023 breach affecting 6.9 million consumers, including over 48,000 Arkansans.
Oregon Attorney General Dan Rayfield announced a July 14 settlement with 23andMe and other states after a 2023 genetic testing data breach.
New Hampshire joined a 42-state coalition settlement with the 23andMe bankruptcy trustee in 2026 to resolve a 2023 genetic data breach affecting 6.9 million customers.
New York Attorney General Letitia James announced a settlement requiring 23andMe to strengthen security after a 2023 breach exposed genetic information of over 305,000 New Yorkers.
Jeff Jackson said Tennessee receives over $666,000 from an $18 million settlement over 23andMe access to genetic data after delayed breach detection.
Utah and more than 40 states settled with 23andMe on July 22 over a 2025 breach that exposed genetic profiles of more than seven million customers.
In 2025, 42 U.S. attorneys general reached an $18 million settlement with 23andMe over a 2023 breach exposing genetic identity and DNA Relatives-linked profile data.
Delaware and Maryland attorneys general joined 41 other states to settle claims against the 23andMe bankruptcy trustee over the 2023 exposure of genetic and personal data for 6.9 million customers.
Texas, led by Attorney General Ken Paxton, joined a $150 million multistate settlement with 23andMe in response to a 2023 genetic and personal data breach affecting about 6.9 million customers.
New York Attorney General Letitia James led 43-state claims as 23andMe agreed to an $18 million settlement over a 2023 genetic-data breach disclosed in October 2023.
Oklahoma Attorney General Gentner Drummond announced a $276,435 payout from a multistate settlement over a 23andMe genetic data breach affecting over 78,000 Oklahoma customers.
Kansas and other states settled with 23andMe in response to a 2023 genetic data breach identified in October 2023.
Wisconsin and 41 other states announced a bankruptcy-trustee settlement with 23andMe over alleged 2023 breach harms, while a $46.75 million class action covers eligible U.S. consumers.
Michigan Attorney General Dana Nessel joined 42 attorneys general to settle with the 23andMe bankruptcy trustee over a 2023 genetic data breach affecting 6.9 million customers.
Jennifer Davenport announced New Jersey will receive nearly $410,000 from a multistate settlement over 23andMe's 2023 genetic data breach impacting 148,585 customers.
Dave Sunday and other state attorneys general announced an $18 million settlement with 23andMe in response to a genetic data breach discovered in October 2023.
Attorneys general from 43 states required 23andMe to pay $18 million after a 2023 breach exposed genetic and personal data through credential stuffing and DNA Relatives abuse.
Pennsylvania Attorney General Dave Sunday said an $18 million bankruptcy settlement followed a 23andMe genetic data breach affecting about 200,000 Pennsylvania residents.
Dan Rayfield announced a multistate July 14 settlement with 23andMe after a 2023 breach exposed 6.9 million customers genetic and related data.
Arkansas Attorney General Tim Griffin announced July 27, 2026, that Arkansas will receive $431,937 from a multistate $18 million 23andMe settlement over a 2023 data breach affecting more than 48,000 Arkansans.
Rob Bonta sued Chrome Holding Co in California over a 2023 breach exposing genetic and personal data of about 855,000 residents via credential stuffing.
A US Bankruptcy Court ordered Chrome Holding to pay $46.8 million for a 2023 23andMe genetic data breach, with remaining distributions and a separate California case pending.
A Missouri bankruptcy court approved a state settlement for a 2023 Chrome Holding and 23andMe genetic data breach while ordering additional protections for consumer genetic information.
Letitia James and 42 attorneys general reached an $18 million settlement with 23andMe in New York after an October 2023 breach exposed millions genetic records.
In Missouri bankruptcy court filings, 23andMe settlement administrators agreed to pay $46.75 million to genetic data breach victims after consolidated privacy litigation.
In St. Louis, Bankruptcy Judge Brian Walsh approved a $46.75 million settlement for 23andMe breach victims, while California AG Rob Bonta pursued civil fines in San Francisco.
Michigan Attorney General Dana Nessel said expected payment from a 42-state settlement over 23andMe's 2023 genetic data breach is limited by Chapter 11 funds.
A 42-state coalition will receive 18 million dollars from 23andMe’s 2023 genetic data breach settlement after a 2025 bankruptcy reduced claims.
Kentucky Attorney General Russell Coleman announced a multistate compensation outcome for Kentucky residents affected by a 2023 23andMe genetic-data breach, after 23andMe filed bankruptcy in 2025.
Kentucky announced settlement payments in 2025 for Ohio, Kentucky, and Indiana residents after a 23andMe genetic data breach in October 2023.
Kentucky Attorney General Russell Coleman announced a multistate settlement with 23andMe after a 2023 breach exposed genetic ancestry data for millions.
Vermont, New Hampshire, and New York reached an $18 million settlement over a 2023 23andMe genetic data breach affecting millions, according to state officials.
Oklahoma Attorney General Gentner Drummond announced a settlement payout tied to a 2023 23andMe genetic data breach, with cybersecurity failures cited by multistate investigators.
Oklahoma Attorney General Gentner Drummond announced a 276,435-dollar multistate settlement over 23andMe’s 2023 breach exposing genetic ancestry data.
Attorney General Marty Jackley announced South Dakota will receive $149,399 from a bankruptcy trustee linked to 23andMe’s 2023 genetic data breach settlement.
Kentucky Attorney General Russell Coleman announced a settlement in a 23andMe genetic data breach case, awarding $259,375 to Kentucky residents after a 2023 incident and 2025 bankruptcy proceedings.
A U.S. bankruptcy judge ordered Chrome Holding to pay $46.75 million to victims of the 2023 23andMe DNA breach, with Kroll administering distributions after Chapter 11 filings.
In the United States, 42 state attorneys general announced an 18 million USD settlement with 23andMe after a 2023 DNA Relatives breach exposed sensitive genetic-related user data.
A multistate coalition of 42 states received a reduced $18 million settlement from 23andMe in response to the 2023 genetic data breach after a 2025 bankruptcy filing.
Alabama Attorney General Steve Marshall announced a $260,817 allocation from an $18 million 23andMe genetic data breach settlement after a 2023 breach affected 69,950 Alabama consumers.
Iowa Attorney General Brenna Bird announced a multistate settlement after a 2023 23andMe genetic-data breach exposed 6.9 million customers worldwide.
South Carolina Attorney General Alan Wilson announced a 280,000 multistate settlement payment tied to 23andMe 2023 breach exposure of genetic data.
Kentucky Attorney General Russell Coleman announced Kentucky participation in a 2023 23andMe genetic data breach settlement after breach investigation findings and bankruptcy-affected claim payouts.
In St. Louis, a bankruptcy judge approved a $46.75 million settlement for 23andMe 2023 genetic data breach victims after Chrome Holding’s asset acquisition.
Ken Paxton announced a multistate bankruptcy settlement with 23andMe in 2025 over a 2023 breach exposing 6.9 million customers, including genetic ancestry data.
Iowa settled with 23andMe after a 2023 breach exposed genetic ancestry data and personal information later sold on the dark web.
Iowa Attorney General Brenna Bird announced Iowa joined a multistate $18 million settlement with 23andMe in 2025 after a 2023 genetic data breach.
Alabama Attorney General Steve Marshall joins multistate resolution with 23andMe over a 2023 breach exposing genetic and personal data, with Alabama’s recovery set at about $260,817.
Minnesota will receive $514,871 from 23andMe’s bankruptcy recovery after a 2023 genetic data breach affecting 92,385 Minnesota residents.
Utah and more than 40 states announced an $18 million settlement with 23andMe in 2025 after a 2023 breach exposed genetic and identity data.
43 attorneys general settled allegations against 23andMe in 2023 credential-stuffing breach case, requiring $18 million and security controls.
Alan Wilson announced South Carolina will receive $280,000 from a multistate settlement over a 2023 23andMe genetic data breach affecting millions.
Washington Attorney General announced 23andMe settlement terms after a 2023 genetic data breach exposed 221,401 state residents, including dark-web published data subsets.
A coalition of 42 state attorneys general announced an $18 million settlement against 23andMe in 2025 after a 2023 breach exposed DNA Relatives and Family Tree data.
Forty-two states, including Pennsylvania, reached an $18 million bankruptcy settlement with 23andMe over a 2023 genetic data breach exposing 6.9 million consumers.
Attorney General Brenna Bird and 42 other states settled with the 23andMe bankruptcy trustee in 2023 genetic-data breach allegations, with Iowa receiving $429,767.
Kansas and 42 states seek $18 million from 23andMe after a 2023 genetic data breach disclosed in October 2023 exposed 51,449 Kansans.
Chrome Holding, under Chapter 11 proceedings, ordered to pay $46.75 million in 2023 23andMe DNA breach compensation after a U.S. bankruptcy judge ruling.
Michigan and over two dozen states settled with 23andMe in response to an October 2023-disclosed 2023 breach exposing customers' personal and genetic data.
Russell Coleman announced Kentucky compensation from a settlement over a 2023 23andMe genetic data breach affecting 69,188 Kentuckians.
Vermont, New Hampshire, and New York joined an $18 million settlement after a 2023 23andMe genetic data breach exposed genetic ancestry information for sale on the dark web.
Tim Griffin led a multistate settlement in 2025 against 23andMe over a 2023 breach affecting 6.9 million consumers, including 48,000 Arkansans.
Spain's AEPD fined 23andMe on an April 2023 genetic data breach, citing delayed notification and missing multifactor authentication.
U.S. bankruptcy judge Brian Walsh ruled in St. Louis that California cannot seek monetary damages against 23andMe for a 2023 genetic data breach while allowing non-monetary remedies.
Texas Attorney General Ken Paxton announced Texas participation in a 150 million settlement with 23andMe over a 2023 breach affecting about 6.9 million customers worldwide.
Rob Bonta filed a lawsuit in San Francisco Superior Court against 23andMe on June 2024 over a 2023 breach impacting nearly seven million users, including 855,541 Californians.
Brian Walsh ruled in St. Louis that California cannot seek monetary damages against 23andMe over a 2023 breach exposing genetic data for about 6.9 million customers.
A St. Louis bankruptcy judge ruled California cannot seek damages over a 2023 23andMe genetic-data breach under the Chapter 11 plan.
New York Attorney General Letitia James and multistate attorneys general secured an $18 million settlement over 23andMe’s 2023 breach of genetic data affecting millions, including New Yorkers.
California Attorney General Rob Bonta sued 23andMe in 2023 genetic data breach allegations involving credential stuffing and prolonged undetected access.
Rob Bonta sued 23andMe in San Francisco Superior Court in May 2025 over a 2023 breach exposing genetic and health information of about 6.9 million customers.
Bankruptcy Judge Brian Walsh ruled California cannot pursue monetary damages tied to the 2023 23andMe breach, requiring lawsuit amendment or dismissal within 14 days.
A bankruptcy administrator for 23andMe agreed in U.S. Bankruptcy Court to pay $46.7 million to genetic data breach claimants, after the 2023 incident enabled credential-stuffing account access.
A coalition of 43 attorneys general secured an $18 million settlement from 23andMe over a 2023 credential-stuffing breach affecting 6.9 million customers.
In 2025, 42 state attorneys general announced an $18 million settlement with 23andMe over 2023 breach exposure of genetic and family tree data.
Idaho Attorney General Labrador announced multistate settlements with Block Inc. and 23andMe in 2023-breach and fraud-related matters, requiring consumer-protection changes and returning over $600,000 to Idaho.
California Attorney General Rob Bonta sued 23andMe in San Francisco Superior Court in 2020s over a 2023 genetic data breach, seeking civil fines.
Brian Walsh ruled California cannot seek monetary damages tied to a 2023 23andMe genetic data breach during the Chapter 11 process in St. Louis.
Ken Paxton announced a multistate bankruptcy settlement with 23andMe over a 2023 genetic ancestry data breach affecting 6.9 million customers worldwide.
Alaska Acting Attorney General Cori Mills announced an $18 million multistate settlement over a 2023 23andMe genetic data breach affecting 19,541 Alaskans.
Jennifer Davenport and 42 state attorneys general announced a settlement with 23andMe's bankruptcy trustee over a 2023 genetic data breach affecting New Jersey customers.
Massachusetts Attorney General Andrea Joy Campbell joined 42 attorneys general in an $18 million settlement over a 2023 23andMe credential-stuffing breach affecting 6.9 million customers.
Oklahoma Attorney General Gentner Drummond announced a multistate settlement with 23andMe in response to a 2023 genetic-data breach affecting over 78,000 Oklahomans.
Alabama receives $260,817 from a multistate settlement over a 2023 23andMe genetic data breach during 2025 Chapter 11 proceedings, Attorney General Steve Marshall said.
Pennsylvania Attorney General Dave Sunday announced an $18 million multi-state settlement for 23andMe’s 2023 credential-stuffing breach affecting 192,093 Pennsylvania customers.
Letitia James and 42 attorneys general settled with 23andMe after a 2023 breach exposed consumers' genetic and personal data.
Arkansas Attorney General Tim Griffin announced a multi-state $18 million settlement with 23andMe over a 2023 breach affecting over 48,000 Arkansas residents.
Brian Walsh in St. Louis limited California to non-monetary remedies over a 2023 23andMe genetic-data breach tied to Chapter 11 restructuring.
On May 14, 2024, the California Supreme Court ruled medical-record breach lawsuits can proceed without proof of actual viewing, focusing on significant risk of unauthorized access.
Rob Bonta filed a lawsuit in California against Chrome Holding Co. for alleged failures protecting genetic and ancestry data after a 2023 security incident.
Jeff Jackson announced an $18 million multistate settlement with 23andMe’s bankruptcy trustee over a 2023 credential-stuffing incident exposing genetic data.
Ken Paxton secured a multistate $150 million settlement in 23andMe bankruptcy over a 2023 genetic data breach affecting 6.9 million customers.
California Attorney General Rob Bonta sued Chrome Holding Co. in San Francisco Superior Court in 2025 over a 2023 breach exposing about 6.9 million users' ancestry data.
Michigan Attorney General Dana Nessel joined a 42-attorney general coalition announcing a July 14, 2026 settlement over 23andMe genetic data breach allegations.
Jeff Jackson secured $666,242 for North Carolina consumers from a multistate settlement over a 23andMe breach exposing genetic data worldwide, after a credential-stuffing attack.
Brian Walsh ruled in St. Louis in 2026 that California cannot seek monetary damages tied to a 2023 23andMe genetic-data breach under Chapter 11.
Letitia James and other attorneys general secured an $18 million settlement with 23andMe after a 2023 breach exposed millions of consumers' genetic data, including listings on the dark web.
Jay Jones and 41 other attorneys general announced a bankruptcy trustee settlement with 23andMe in response to a 2023 genetic data breach affecting nearly seven million customers.
California Attorney General Rob Bonta sued Chrome Holdings in San Francisco Superior Court in connection with a 2023 23andMe breach exposing genetic data.
Bankruptcy Judge Brian Walsh in St. Louis blocked California monetary damages against 23andMe after a 2023 genetic data breach, while allowing non-monetary remedies.
Oklahoma Attorney General Gentner Drummond announced July 16, 2026 that Oklahoma will receive $276,435 from a multistate settlement tied to 23andMe’s 2023 genetic data breach.
Kentucky Attorney General Russell Coleman announced a settlement from the 2023 23andMe data breach, affecting 69,000 Kentucky residents.
Georgia Attorney General Chris Carr announced a $452,232 settlement payment from 23andMe for a 2023 genetic data breach that affected 171,125 Georgians.
Utah reached an $18 million settlement with 23andMe in connection with a 2023 breach affecting about 6.9 million users and securing restrictions on future genetic data use.
On May 14, 2026, the California Supreme Court ruled in J.M. v. Illuminate Education, Inc. that CMIA breach pleading can rely on significant risk, while narrowing covered healthcare providers.
Texas Attorney General Ken Paxton announced a multistate settlement with 23andMe in connection with a genetic data breach affecting about 6.9 million users.
Virginia Attorney General Jay Jones and other state attorneys general settled with 23andMe in connection with a 2023 breach compromising genetic data of more than 7 million people.
Rob Bonta sued 23andMe in California after a 2023 breach exposed genetic data for nearly 7 million people, including 850,000 Californians.
23andMe reported a 2023 credential-stuffing incident accessed accounts and scraped DNA Relatives and Family Tree data, leading to class-action settlements approved in January 2026.
A California Supreme Court ruling in J.M. v. Illuminate Education Inc. uses a relaxed data breach pleading standard based on risk of unauthorized access.
On May 14, 2026, the California Supreme Court in J.M. v. Illuminate Education replaced the CMIA actually-viewed defense with a significant-risk standard and narrowed customer-standing under the Customer Records Act.
On May 14, 2026, the California Supreme Court in J.M. v. Illuminate Education set a CMIA medical breach standard requiring significant risk, not proof of actual hacker viewing.
California Supreme Court decided J.M. v. Illuminate Education on CMIA and CRA pleading standards after an educational technology data breach.
⭐⭐⭐
California Supreme Court ruled a student data breach class action against Illuminate Education Inc. was inadequately pleaded under California medical and customer records privacy laws, then remanded for possible amendment.
Rob Bonta sued 23andMe in California in connection with a 2023 data breach exposing nearly seven million users, including genetic data.
California sued a 23andMe successor after a 2023 breach, and bankruptcy administrators sought to stop the case in Missouri court.
US Bankruptcy Court judge Brian C. Walsh will rule soon on whether California can proceed with a suit over Chrome Holding Co.'s 2023 breach impacting nearly 7 million users.
Judge Brian C. Walsh approved a $46.7 million bankruptcy settlement for 23andMe data breach claimants in Missouri.
Judge Brian C. Walsh of the Eastern District of Missouri halted California litigation against 23andMe and set a two-week deadline for dismissal or removing monetary relief.
Rob Bonta filed a California lawsuit in San Francisco Superior Court against 23andMe on breach-protection allegations affecting millions of customers.
Arkansas Attorney General Tim Griffin announced a settlement with 23andMe in response to a 2023 data breach exposing genetic ancestry data for customers in Arkansas.
OFAC sanctioned First VPN Service operators as 23andMe, Chrome Holding, faced an $18 million privacy-security settlement tied to delayed breach response.
Iowa Attorney General Brenna Bird announced a $439,000-plus state payout from a $18 million multistate settlement with 23andMe over a 2023 genetic data breach.
Rob Bonta announced a California lawsuit against 23andMe alleging inadequate protection of sensitive personal information that preceded a 2023 data breach.
Jeff Jackson discussed the 23andMe genetic data breach, a robocall cryptocurrency law, and consumer settlements in Wilmington, North Carolina.
KND Complex Litigation notified Canadian 23andMe users to submit class-action settlement claims by June 25, 2026 after a 2023 data breach.
A court ordered a 46.75 million settlement in the 23andMe data breach case to provide payouts and monitoring based on impact criteria.
23andMe reported a late-2023 genetic data breach, then agreed to an 18 million dollar settlement with 42 state attorneys general in response to exposed ancestry and health-related information.
Supreme Court plans to file an opinion in J.M. v. Illuminate Education on vendor liability for disclosed student confidential medical and personal data after a breach.
California Attorney General Rob Bonta sued Chrome Holding in 2023 over allegations of negligent security and encryption practices tied to a 23andMe genetic data breach.