POLISCOPE
Back to feed
NewsSFistOctober 27, 2026San Francisco County

23andMe Agrees to $70 Million in Settlements Over 2023 Data Breach

Photo: SFist

Genetic testing company 23andMe has agreed to pay a total of $70.76 million across multiple settlements regarding a 2023 data breach that exposed the personal and genetic information of 6.9 million customers. The agreement includes $46.75 million for affected victims, a $6.01 million settlement with California, and $18 million to resolve claims from 42 other states. The company also agreed to implement stronger data security measures.

Data PrivacyLegal SettlementsConsumer ProtectionCorporate BankruptcyCybersecurity
Read the full story at SFist

Why It Matters

Millions of customers who had personal, ancestry, and genetic data exposed in the 2023 breach stand to receive compensation from a $46.75 million victim settlement, while the company must adopt heightened security protocols.

Key Facts

  • 23andMe agreed to cash settlements totaling over $70 million over a 2023 data breach affecting 6.9 million customers.
  • A victim settlement approved in July allocates $46.75 million for people affected by the breach.
  • California Attorney General Rob Bonta reached a $6.01 million settlement with 23andMe over the breach and state objections to an asset sale.
  • A separate agreement requires Chrome Holding Company to pay $18 million to settle claims brought by attorneys general from 42 other states.
  • The 2023 breach compromised personal information for about 5.5 million users of the DNA Relatives feature and 1.4 million users of Family Tree profiles.
  • Compromised data included names, birth years, ancestry reports, locations, and genetic relationships.
  • A multistate investigation found the company lacked basic protections such as mandatory multifactor authentication and adequate login monitoring.
  • 23andMe filed for Chapter 11 bankruptcy protection in March 2025.
  • In June 2025, TTAM Research Institute acquired 23andMe's assets for $305 million.
  • The settlement with 42 states requires stronger data security measures to protect customer information.

Who's Mentioned

OrganizationChrome Holding Company“Legal entity handling 23andMe's remaining obligations”locationPalo Alto“Current headquarters of 23andMe”locationSunnyvale“Previous location of 23andMe operations”OrganizationTTAM Research Institute“Nonprofit controlled by Wojcicki that acquired 23andMe assets”PersonRob Bonta“California Attorney General”locationMountain View“Previous location of 23andMe operations”locationSouth San Francisco“Previous location of 23andMe operations”PersonAnne Wojcicki“Co-founder of 23andMe”Organization23andMe“Genetic testing company involved in data breach and settlements”