23andMe Genetic Data Breach Settlement

A multistate settlement is providing limited compensation after the 2023 23andMe breach exposed genetic and personal information linked to about 6.

9 million customers. Investigators alleged that 23andMe lacked adequate multifactor authentication, monitoring of unusual login activity, and testing of certain design features. The company’s bankruptcy limits recovery, while the transfer of consumer data to TTAM Research Institute, later renamed the 23andMe Research Institute, places continued security, privacy, and deletion obligations at the center of the resolution.