23andMe

Settlement resolving allegations of unreasonable data security practices and a genetic data breach affecting millions of 23andMe customers.

Attorney General Phil Weiser announced a multistate settlement with the bankruptcy trustee for 23andMe, resolving allegations stemming from a 2023 data breach that compromised the genetic data of 6.9 million customers worldwide. Under the settlement, states will be paid $18 million out of available bankruptcy funds immediately, with Colorado receiving $394,324. 23andMe also agreed to a $46.75 million class-action settlement in the bankruptcy to provide relief to affected U.S. consumers who submitted claims by February 17, 2026. The breach exposed genetic ancestry information, and subsets of this data were subsequently published for sale on the dark web. 23andMe filed for bankruptcy protection in March 2025, and states subsequently filed claims related to the data breach investigation. As part of the bankruptcy proceedings, the assets were sold to TTAM Research Institute (now 23andMe...

• U.S. consumers affected by the 2023 23andMe data breach.
• Consumers who submitted claims by February 17, 2026.