BANKR. E.D. MO.Litigation
California reaches $6 million settlement with former 23andMe over 2023 data breach
California Attorney General Rob Bonta on October 19, 2026, announced a $6 million settlement with Chrome Holding Co., formerly 23andMe, resolving state claims that the genetic testing company failed to protect customers' personal and genetic data before a 2023 breach affecting nearly 7 million people, including more than 855,000 Californians. The settlement was filed in federal bankruptcy court in Missouri and awaits approval.
Filing (California Department of Justice) → · CTV News (Reuters), Bloomberg Law
Key points
- It also resolves California's appeal over the sale of customers' genetic data in the bankruptcy without their affirmative consent.California Department of Justice
- The genetic data and samples went to TTAM Research Institute, a nonprofit set up by 23andMe's co-founder and former CEO.California Department of Justice
- California had sued Chrome Holding in state court over data security and alleged misrepresentations, and filed a matching bankruptcy claim.California Department of Justice
- Chrome Holding agreed in July to pay $18 million to 42 states and earlier agreed to pay $46.7 million to breach claimants.Bloomberg Law
- Customers can still ask the company holding their data to delete it, destroy samples or withdraw research consent.California Department of Justice
Sources3 articles across 3 outlets
Bloomberg Law
California Department of Justice
CTV News (Reuters)