Science & Tech · Cybersecurity · 21 hrs ago
California to receive $6 million in 23andMe data breach settlement
California will receive $6 million in a settlement resolving its legal claims against 23andMe over a 2023 data breach.
The breach exposed genetic and other personal information belonging to 6.9 million customers, including more than 855,000 Californians.
The company filed for bankruptcy in March 2025 after falling demand and legal fallout from the breach, and its assets were sold to TTAM Research Institute, a nonprofit controlled by co-founder Anne Wojcicki.
California argued the sale violated state privacy law because customers had not expressly agreed to the transfer of their data, but courts rejected the state’s efforts to block it.
The state will drop further appeals as part of the settlement.
Customers could delete their data during the sale process, and California’s attorney general says they can still do so regardless of who owns it.
Separately, 23andMe agreed to pay $46.75 million to people harmed by the breach as part of its bankruptcy.
California will receive $6 million from 23andMe’s bankruptcy settlement over claims tied to a 2023 data breach.
The breach exposed genetic and other personal information belonging to 6.9 million customers, including more than 855,000 Californians.
The settlement resolves California’s legal claims and requires the state to drop further appeals over the sale of 23andMe assets.
Affected customers can still delete their data and request destruction of genetic samples.
The settlement is pending approval by a U.S. bankruptcy court.
- Who
- California and the Chrome Holding Company, which was formerly known as 23andMe.
- What
- California will receive $6 million to resolve legal claims related to the 2023 data breach.
- When
- Announced on October 19, 2026. The settlement is pending bankruptcy court approval.
- Where
- California; the settlement is pending before the U.S. Bankruptcy Court in the Eastern District of Missouri.
- Why
- The settlement resolves claims that 23andMe failed to protect customers’ genetic and personal information in a breach affecting 6.9 million people.
California
Bankruptcy court
Sale of customer data
California
California argued the sale to TTAM Research Institute violated state privacy law and lacked customers’ express consent.
Bankruptcy court
The bankruptcy judge rejected California’s objections to the sale and ruled the state could not sue the successor to recover money from the bankrupt company.
Further appeals
California
California agreed to drop further appeals as part of the settlement.
Bankruptcy court
The court had ruled against California’s objections, and a federal district court rejected its appeal over the sale.
A data breach exposed genetic and other personal information belonging to 6.9 million 23andMe customers.
23andMe filed for bankruptcy and sought to sell its business.
California Attorney General Rob Bonta announced the $6 million settlement.
- Settlement
- $6 million for California
- Customers affected
- 6.9 million
- Californians whose genetic information was exposed
- More than 855,000
- Asset sale
- $305 million to TTAM Research Institute
- Other state settlement
- $18 million with a coalition of 42 state attorneys general
- Bankruptcy court
- Eastern District of Missouri
4 sources
What people are saying
23andMe collected genetic data about millions of people and failed to meet its obligation to keep that information safe
Companies cannot evade California’s consumer protection and privacy laws by filing for bankruptcy.
I want to remind Californians that customers of 23andMe can delete their private, genetic data – no matter who owns it.