California reaches $6 million settlement with successor company to 23andMe over 2023 breach

California Attorney General Rob Bonta announced a $6 million settlement within the 23andMe bankruptcy, ending the state's claims related to a 2023 data breach. The state accuses the company of failing to protect sensitive customer data, and the breach affected more than 855,000 California residents.

AI-written summary of 6 sources; every verified point is backed by a verbatim quote. How Iyan works

• The settlement, if approved, ends the state's allegations that the company failed to protect customer data, and includes its objection to the sale of genetic data during the bankruptcy.

  «as well as the state's objection to 23andMe's sale of genetic data during bankruptcy proceedings.»

  Law360
• The breach affected 6.9 million people, including 855,000 California residents.

  «its 2023 data breach that affected 6.9 million individuals, including 855,000 Californians.»

  The HIPAA Journal
• This settlement followed an $18 million settlement in July with a coalition of 42 state attorneys general.

  «In July, a coalition of 42 state attorneys general agreed to an $18 million settlement with 23andMe»

  The HIPAA Journal
• The settlement came after the 2023 breach and a bankruptcy and sale process that took place in 2025.

  «After a 2023 data breach and a bankruptcy and sale process in 2025»

  Los Angeles Times

Iyan — See it for yourself. What changed in your world today, why it matters, and how we know.
How it works • Privacy • Terms