AG Sunday Announces $18 Million National Settlement with 23andMe Over Genetic Data Breach
Attorney General Dave Sunday announced an $18 million multistate settlement with 23andMe over a 2023 genetic data breach affecting 6.9 million consumers.Summary
Attorney General Dave Sunday joined 42 other states in announcing an $18 million national settlement with genetic testing company 23andMe to resolve claims stemming from a 2023 data breach that exposed the genetic data of 6.9 million consumers worldwide, including about 192,000 Pennsylvanians. Pennsylvania will receive $491,902 from the settlement. The settlement follows findings that 23andMe failed to implement reasonable security measures against credential stuffing attacks and other vulnerabilities, and the company initially denied responsibility. In addition to the multistate agreement, 23andMe agreed to a $46.75 million class-action settlement for U.S. consumers who filed claims by February 17, 2026. After 23andMe filed for bankruptcy in March 2025, its consumer data was sold to TTAM Research Institute (now 23andMe Research Institute) under strict data-security and privacy conditions intended to protect genetic information going forward.
(Source：Gant News)