California’s 23andMe Breach LawsuitCalifornia’s 23andMe Breach LawsuitCoverage from Engadget, Los Angeles Times, and others
00/00/0000
DailyWeekly
California Attorney General Rob Bonta sued 23andMe, also known as Chrome Holding Co.
in bankruptcy proceedings, over alleged failures connected to a 2023 breach affecting data associated with nearly seven million customers. The complaint alleges that attackers used credential stuffing and remained undetected for months, accessing sensitive genetic, health, ancestry, and family-related information. The case centers on California privacy and consumer-protection claims, including the defendant’s response to the breach and its bankruptcy-jurisdiction challenge. A proposed $6 million settlement is described as resolving California’s claims, including related concerns about genetic-data transfers during bankruptcy.
The California DOJ announcement reports the proposed $6 million resolution and explains how it addresses both the breach and bankruptcy-era data transfer.
California Department of Justice, Office of the Attorney General
Key Issues
01
Large-scale exposure and alleged security failures
California’s case centers on a 2023 breach that allegedly enabled prolonged unauthorized access to sensitive genetic, health, and profile information affecting millions. The state alleges weak safeguards and inadequate handling of warnings and breach disclosure.
Stable
Drawn from 3 articles
02
California’s claims move toward a $6 million resolution
California announced a $6 million settlement with Chrome Holding Co. resolving claims tied to the breach and handling of genetic information during bankruptcy. The agreement remains pending court approval, so resolution is not yet final.
Stable
Drawn from 4 articles
03
Bankruptcy-era data transfer and consent remain central
The bankruptcy sale transferred customers’ genetic information and samples, prompting California to argue that separate, explicit consent was required. Courts rejected the state’s objection, and the settlement resolves its appeal; customers retain options to request deletion, sample destruction, or withdrawal of research consent.
Stable
Drawn from 4 articles
Key Numbers
$6 million USD
Settlement payment
Pending court approval
“California Attorney General Rob Bonta announced a $6 million settlement with Chrome Holding Co., formerly known as 23andMe. Filed in the U.S. Bankruptcy Court for the Eastern District of Missouri, the settlement is pending court approval and resolves claims concerning the company’s protection of customers’ personal and genetic information and the sale of Californians’ genetic information and samples during bankruptcy without affirmative consent.”
California Department of Justice, Office of the Attorney General
Looking Back
146 Day Timeline
Articles published over time. Hover any bar for the period and its article count.
May 28
Jun 21
Jul 15
Aug 8
Sep 1
Sep 25
Oct 19
The Story So Far
No material change
No material change: the new articles repeat the previously reported $6 million settlement and its pending approval.
Previously
California Attorney General Rob Bonta has sued 23andMe, now identified in the case as Chrome Holding Co., over a 2023 breach that allegedly exposed genetic, health, ancestry, and relatives’ information tied to nearly 6.9 million U.S. customers. The complaint alleges credential-stuffing and other weaknesses enabled access for about five months, and that the company failed to respond adequately to warnings or accurately describe the incident. The case seeks civil penalties under California privacy and consumer-protection laws; the company’s bankruptcy adds uncertainty about collecting any penalties.
History
10/23/2026
California announced a $6 million settlement with 23andMe’s successor, moving the case from an active lawsuit toward resolution, though approval may still be required. The dispute also extended to the bankruptcy-era transfer of genetic data.
Rob Bonta sued Chrome Holding Co. in California over a 2023 breach allegedly exposing millions of users' genetic data through credential stuffing and the DNA Relatives feature.
5/29/2026 • Data Breaches & Exposure Events • General
Rob Bonta sued 23andMe in San Francisco Superior Court in 2024, alleging inadequate safeguards after a 2023 genetic data breach exposed millions of customers.
5/30/2026 • Data Breaches & Exposure Events • General
Rob Bonta sued 23andMe in San Francisco Superior Court in May 2025 over a 2023 breach exposing genetic and health information of about 6.9 million customers.
5/28/2026 • Regulation, Law & Enforcement • General
Tech Jacks Solutions Security Command Center / Tech Jacks Solutions66
Rob Bonta sued Chrome Holding Co in California over a 2023 breach exposing genetic and personal data of about 855,000 residents via credential stuffing.
5/30/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta sued Chrome Holding Co. in San Francisco Superior Court in 2025 over a 2023 breach exposing about 6.9 million users' ancestry data.
5/29/2026 • Regulation, Law & Enforcement • General
Attorney General Rob Bonta announced a California lawsuit against Chrome Holding Co over a 2023 breach of genetic and ancestry data that expanded through DNA Relatives scraping.
5/29/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta sued Chrome Holdings in San Francisco Superior Court in connection with a 2023 23andMe breach exposing genetic data.
5/29/2026 • Regulation, Law & Enforcement • General
Rob Bonta filed a lawsuit in California against Chrome Holding Co. for alleged failures protecting genetic and ancestry data after a 2023 security incident.
5/28/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta filed a 2023-genetic-breach lawsuit against 23andMe in California, alleging insecure systems, credential stuffing exposure, and dark-web sale of genetic data.
5/28/2026 • Data Breaches & Exposure Events • General
Rob Bonta filed suit in San Francisco Superior Court against Chrome Holding Co., formerly 23andMe, over a 2023 genetic data breach affecting millions of users.
5/28/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta sued 23andMe in 2023 genetic data breach allegations involving credential stuffing and prolonged undetected access.
5/28/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta sued 23andMe in San Francisco Superior Court in response to a 2023 genetic data breach affecting about 6.9 million U.S. customers.
5/28/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta sued 23andMe in the 2020s over a 2023 genetic data breach, alleging inadequate security, delayed detection, and misleading customer messaging.
5/29/2026 • Data Breaches & Exposure Events • General
Rob Bonta filed a lawsuit in San Francisco Superior Court against 23andMe on June 2024 over a 2023 breach impacting nearly seven million users, including 855,541 Californians.
6/2/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta sued Chrome Holding Co. in San Francisco over alleged security failures in a 2023 breach exposing ancestry and genetic data sold on the dark web.
5/29/2026 • Data Breaches & Exposure Events • General
Rob Bonta filed a civil lawsuit in San Francisco Superior Court in the 2020s accusing Chrome Holding Co. of insufficient security after a 2023 23andMe breach exposed nearly seven million users.
5/29/2026 • Data Breaches & Exposure Events • General
Rob Bonta filed a California lawsuit against 23andMe in 2024 alleging security failures behind a 2023 genetic data breach affecting about 7 million customers.
5/29/2026 • Regulation, Law & Enforcement • General
Interesting13 articles · CI Score 45–59
California Department of Justice, Office of the Attorney General59
California Attorney General Rob Bonta announced a pending $6 million settlement with Chrome Holding Co. over 23andMe genetic-data security and sale claims in bankruptcy proceedings in Missouri.
10/19/2026 • Regulation, Law & Enforcement • General
Rob Bonta announced a California lawsuit against 23andMe alleging inadequate protection of sensitive personal information that preceded a 2023 data breach.
5/28/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta announced on Monday in California that the state will receive $6 million from 23andMe's bankruptcy settlement over claims tied to the 2023 customer data breach.
10/19/2026 • Regulation & Law & Enforcement • General
California Attorney General Rob Bonta announced on Monday that California will receive $6 million in 23andMe's bankruptcy settlement over genetic-data privacy claims in California.
10/19/2026 • Regulation, Law & Enforcement • General
California Attorney General Rob Bonta announced Monday in California that the state will receive $6 million from 23andMe's bankruptcy to settle claims related to the 2023 data breach.
10/19/2026 • Data Breaches & Exposure Events • General
California and 23andMe's corporate successor reached a proposed $6 million settlement on October 19, 2026, in California over allegations tied to a 2023 breach and genetic data sales.
10/19/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta sued Chrome Holding in 2023 over allegations of negligent security and encryption practices tied to a 23andMe genetic data breach.
6/1/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta announced Monday that California will receive $6 million to resolve privacy claims tied to 23andMe's 2023 breach and bankruptcy sale.
10/19/2026 • Data Breaches & Exposure Events • General
California Attorney General Rob Bonta announced that California will receive $6 million in 23andMe's bankruptcy settlement, resolving claims over the company's 2023 customer data breach affecting Californians.
10/19/2026 • Data Breaches & Exposure Events • General
AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
