Key Highlights

  • A US bankruptcy judge approved a 46.75 million dollar settlement for 23andMe data breach victims.
  • The 2023 breach exposed genetic and personal information of an estimated 6.9 million customers.
  • The settlement will be reduced by 14.29 million dollars previously disbursed, for a net payout of 32.46 million dollars.
  • California's Attorney General is separately suing 23andMe over the breach in state court.

Court Approval Brings Resolution to Data Breach Claims

US Bankruptcy Judge Brian Walsh approved a 46.75 million dollar settlement for victims of a 2023 data breach at genetic testing company 23andMe, ruling the settlement fair, equitable and in the best interest of the trust overseen by the company's bankruptcy administrator. The breach exposed genetic and other personal information belonging to an estimated 6.9 million customers, representing one of the more significant data security incidents involving sensitive genetic information.

The approved settlement amount will be reduced by 14.29 million dollars previously disbursed in connection with the breach, resulting in an additional payout of 32.46 million dollars to affected victims, structured to account for compensation already distributed prior to this court approval.

Bankruptcy Context Surrounding the Settlement

23andMe, based in Palo Alto, California, filed for bankruptcy protection from creditors in March 2025, citing the data breach, related litigation, and both increased competition and falling demand for genetic testing products as reasons for its Chapter 11 filing. This settlement represents a key step in resolving the financial obligations arising from the breach as part of the broader bankruptcy proceedings.

Following the bankruptcy filing, TTAM Research Institute, a nonprofit organisation controlled by 23andMe co-founder Anne Wojcicki, acquired the company's assets for 305 million dollars last July, a transaction that occurred separately from the ongoing resolution of data breach related liabilities addressed in this settlement.

Separate State Litigation Remains Unresolved

California Attorney General Rob Bonta continues pursuing a separate lawsuit against 23andMe over the breach, accusing the company of ignoring warnings that its systems were compromised and downplaying the severity of the incident. Bonta is seeking potentially millions of dollars in civil fines against Chrome Holding Co, the legal entity now representing 23andMe, in San Francisco Superior Court.

Judge Walsh has yet to rule on the bankruptcy administrator's motion to block California's lawsuit from proceeding. In a June filing, Bonta argued that Congress did not grant bankruptcy judges the authority to deprive state courts of jurisdiction over state law-based enforcement actions, cautioning against allowing bankruptcy courts to become what he described as a haven for wrongdoers.

Conclusion

The court's approval of the 46.75 million dollar settlement provides a measure of resolution for the millions of customers affected by 23andMe's 2023 data breach, even as the company's broader legal challenges remain unresolved through the ongoing California state enforcement action. Whether the bankruptcy court ultimately allows California's separate lawsuit to proceed may set an important precedent for how state consumer protection enforcement interacts with federal bankruptcy proceedings in future corporate data breach cases.

FAQs

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice.