Industry - Lawsuit
Executive Summary
Attorney General Ellison reaches multistate settlement of bankruptcy claims against 23andMe over genetic data breach
What Happened
Attorney General Ellison, along with attorneys general from multiple states, reached a settlement with 23andMe regarding bankruptcy claims related to a genetic data breach. The settlement was announced on July 15, 2026, and involves the genetic testing company 23andMe, which experienced a breach of customer genetic information. The multistate action addresses claims arising from this data breach in the context of the company's bankruptcy proceedings.
Who Is Affected
Customers of 23andMe who had their genetic data compromised in the breach are affected. The multistate nature of the settlement suggests the breach impacted users across multiple U.S. states. Given 23andMe's customer base, potentially millions of individuals who submitted DNA samples for ancestry or health testing may have had their sensitive genetic information exposed.
Why It Matters
This case highlights the severe consequences when companies holding highly sensitive genetic data experience security failures, particularly as genetic information is immutable and cannot be changed like passwords or credit cards. The involvement of multiple state attorneys general and the bankruptcy context underscore systemic concerns about how genetic testing companies safeguard irreplaceable biometric data. The settlement establishes accountability for breaches involving genetic information, which can reveal health predispositions, family relationships, and ethnic background.
What You Should Do
If you are a 23andMe customer, monitor communications from the company and relevant state attorneys general offices for information about the settlement and any compensation or protective measures available to you. Request details about what specific genetic data was compromised in your case and consider placing fraud alerts or credit freezes with major credit bureaus, as genetic data can be used for identity theft. Review your privacy settings with any genetic testing services you use and consider whether to delete your data or opt out of research sharing programs where available.
Summary generated from verified sources and reviewed before publication. How we summarize.