23andMe Data Breach Settlement: $30 Million, Payouts Delayed by Bankruptcy
Final approval came January 2026 — but 23andMe's Chapter 11 bankruptcy means eligible claimants face an uncertain wait for payment.
Revisado Editorialmente — Contenido revisado en cuanto a exactitud utilizando investigación legal publicada, datos gubernamentales y registros judiciales verificados. Vea nuestra metodología
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Alleges
In October 2023, 23andMe disclosed hackers had accessed personal and genetic data of ~6.4 million U.S. customers via a credential-stuffing attack, exposing names, birth years, ancestry reports, and in many cases sensitive health-predisposition information. Over 40 class actions alleged 23andMe failed to protect uniquely sensitive genetic data and was slow to notify users. The consolidated MDL settled for $30 million (potentially up to $50M), though 23andMe's March 2025 Chapter 11 bankruptcy added major uncertainty about payout timing.
Case Details
Original MDL: Case No. 24-md-03098-EMC, N.D. California. Bankruptcy proceedings: In re: 23andMe Holding Co., U.S. Bankruptcy Court, Eastern District of Missouri (Judge Brian C. Walsh). Final approval: January 30, 2026.
Current Status
Who Is Affected & Can You Join?
U.S. residents who were 23andMe customers between May 1, 2023 and October 1, 2023 and received notice their data was compromised in the October 2023 breach. The claim deadline (Feb 17, 2026, extended to March 1 for some late-notice claimants) has passed.
Is There a Payout?
Case Timeline
- 1
Data Breach Announced (Oct 2023)
23andMe disclosed hackers accessed personal and genetic data of ~6.4 million U.S. customers via credential stuffing; 40+ class actions followed.
- 2
MDL Consolidation & Settlement (2024)
Cases consolidated into MDL 24-md-03098-EMC in N.D. California; parties reached a $30M (up to $50M) settlement with preliminary approval.
- 3
23andMe Files Chapter 11 (Mar 2025)
23andMe filed for bankruptcy, transferring settlement proceedings to the U.S. Bankruptcy Court in the Eastern District of Missouri.
- 4
TTAM Acquires Assets (Jul 2025)
TTAM Research Institute, led by co-founder Anne Wojcicki, bought 23andMe's assets including customer genetic data, agreeing to honor deletion requests.
- 5
Final Approval & Claims Deadline (Jan–Feb 2026)
Judge Walsh granted final approval January 30, 2026; the claim deadline was February 17, 2026. Payment distribution awaits bankruptcy reconciliation.
Scam & Misinformation Warnings
Whenever a brand lawsuit goes viral, scam sites and bad actors follow. Watch for these red flags:
Fake '23andMe Settlement Payment' Emails
Scammers email claiming to be the administrator and link to external 'claim' sites. The only legitimate site was 23andmedatasettlement.com — claims are now closed and payments not yet distributed.
Genetic-Data Phishing
Because the breach exposed DNA data, fraudsters send phishing messages offering to verify 'which DNA data was stolen' in exchange for personal or financial info. No such verification is required.
Fee-Charging 'Claim Services'
Some companies charged fees or a cut to file 23andMe claims. The official process via the administrator was free, and the window has now closed — current solicitations are fraudulent.
Frequently Asked Questions
Can I still file a claim for the 23andMe settlement?
No. The deadline was February 17, 2026 (extended to March 1 for some late-notice claimants). That window has passed; no new claims can be submitted.
When will payments be distributed?
No confirmed date. The administrator says payments will go out 'once the bankruptcy reconciliation process is resolved and any appeals concluded,' warning this 'may take several months or longer' from the January 2026 approval.
How does the bankruptcy affect my payout?
23andMe filed Chapter 11 in March 2025. Although the $30M fund was approved, distribution must wait for the bankruptcy court's reconciliation — so on-time claimants may wait significantly longer than in a typical settlement.
What data was exposed?
Names, birth years, profile photos, ancestry composition reports, and for many users health-predisposition information linked to DNA. About 6.4 million U.S. customers were affected.
How much money will I receive?
Estimates: ~$165 if your health genetic info was compromised; ~$100 statutory if you live in AK/CA/IL/OR; up to $10,000 for documented extraordinary losses. Amounts are pro-rata and could be lower; fees and costs are deducted first.
Who bought 23andMe and what happens to my DNA data?
TTAM Research Institute, a nonprofit led by co-founder Anne Wojcicki, acquired 23andMe's assets in July 2025, including genetic data. TTAM lets former customers request deletion at any time.
Why is a genetic-data breach especially serious?
DNA data is among the most sensitive personal information — unlike a password it cannot be changed, is shared with relatives, and can reveal health conditions and ancestry. Multiple state attorneys general acted separately from the class action.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.