California Sues 23andMe Over Genetic Breach

California Attorney General Rob Bonta sued Chrome Holding Co.

, formerly 23andMe, over alleged failures to protect and disclose the scope of a 2023 breach involving genetic, ancestry, health, and relative information. The complaint says credential stuffing compromised about 14,000 accounts, while the DNA Relatives feature enabled access to data associated with nearly 7 million people, including roughly 855,000 Californians, during months of undetected activity. The case extends regulatory and financial scrutiny of 23andMe after its bankruptcy, prior private litigation, and enforcement action in the United Kingdom.