--- title: "California settles with 23andMe's successor for $6.01 million over the 2023 genetic-data breach" description: "California's attorney general says a $6 million settlement resolves the state's claims over 23andMe's 2023 breach and its challenge to the sale of customers' genetic data. The filing puts the figure at $6,010,000." url: "https://sonomos.ai/newsroom/california-23andme-settlement-6-million-genetic-data/" type: NewsArticle publisher: "Sonomos Newsroom" published: "2026-10-21T13:21:00.000Z" updated: "2026-10-21T13:21:00.000Z" section: "Privacy" format: news tags: ["genetic data", "data breach", "bankruptcy", "California"] word_count: 532 corrections: 0 json: "https://sonomos.ai/newsroom/california-23andme-settlement-6-million-genetic-data/index.json" sources: - title: "Attorney General Bonta secures $6 million settlement in 23andMe litigation" publisher: "California Department of Justice" url: "https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-6-million-settlement-23andme-litigation" - title: "Stipulation between the Plan Administration Trust, the Wind-Down Debtor and the State of California (Doc 2760, Case No. 25-40976)" publisher: "U.S. Bankruptcy Court, Eastern District of Missouri" url: "https://oag.ca.gov/system/files/attachments/press-docs/chrome-2760-joint-stipulation.pdf" - title: "$6M settlement reached in 23andMe data breach lawsuit" publisher: "Mountain View Voice" url: "https://www.mv-voice.com/courts/2026/10/20/6m-settlement-reached-in-23andme-data-breach-lawsuit/" --- # California settles with 23andMe's successor for $6.01 million over the 2023 genetic-data breach California's attorney general says a $6 million settlement resolves the state's claims over 23andMe's 2023 breach and its challenge to the sale of customers' genetic data. The filing puts the figure at $6,010,000. Published 2026-10-21 13:21 UTC · Privacy · News · 2 min read Sonomos Newsroom. URL: https://sonomos.ai/newsroom/california-23andme-settlement-6-million-genetic-data/ California Attorney General Rob Bonta announced on October 19 a settlement with the successor to genetic-testing company 23andMe, resolving the state's claims over the company's 2023 data breach and its objection to the sale of customers' genetic data. [The attorney general's release](https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-6-million-settlement-23andme-litigation) calls it a $6 million settlement; [the stipulation filed in the bankruptcy case](https://oag.ca.gov/system/files/attachments/press-docs/chrome-2760-joint-stipulation.pdf) sets the amount at $6,010,000. ## What the settlement provides According to the stipulation, California's two proofs of claim in the bankruptcy would be allowed at $6,010,000. Within 10 calendar days after court approval, the Plan Administration Trust would pay that sum to California as a lump sum. The document says the attorney general may use the money at their sole discretion to provide consumer relief related to the 2023 incident, and that any amount not used for that purpose moves within one year into the Unfair Competition Law Fund, which is reserved for consumer-protection enforcement. The stipulation says the payment would be the total California receives from the debtors and their estates on these matters. Within four business days of full payment, California would dismiss its state court action, its appeal of the order approving the sale, and a further appeal the document calls the California State Litigation Appeal, all with prejudice. The debtors would also provide the attorney general with identifying and contact information for California residents whose information was compromised, to the extent reasonably necessary to distribute the relief. The release describes the settlement as pending court approval. A footnote in the stipulation says the parties believe the plan lets them settle without court approval, and that they are filing it to provide certainty. ## The background The attorney general's release says the 2023 breach affected nearly 7 million customers nationwide, including more than 855,000 Californians. It says the state alleges that unreasonable data security practices led to the breach and that the company made misrepresentations that misled customers and the public. The stipulation records that 23andMe's corporate predecessor disclosed the breach in October 2023, and that the company filed for chapter 11 protection on March 23, 2025. According to the release, the company sold its customers' genetic data and biological samples to TTAM Research Institute, a nonprofit founded by its co-founder and former chief executive. The release says the bankruptcy court and the district court both denied California's objection to that sale, and that the settlement resolves the state's appeal. In the stipulation's account, California filed that appeal on July 3, 2025, and brought its state court action in San Francisco on May 27, 2026. The release says affected consumers keep the right to request deletion of their information and destruction of their samples. It does not describe a deletion duty that the settlement itself imposes on the company. [The Mountain View Voice's report](https://www.mv-voice.com/courts/2026/10/20/6m-settlement-reached-in-23andme-data-breach-lawsuit/) quotes Bonta as saying that companies cannot evade California's consumer protection and privacy laws by filing for bankruptcy. ## What is unresolved The stipulation's terms take effect only once the trust, the wind-down debtor and California have all signed it. The sources do not say whether the court has approved it or when payment would be made. The release does not describe any security requirements for the company. ## Sources 1. [Attorney General Bonta secures $6 million settlement in 23andMe litigation](https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-6-million-settlement-23andme-litigation), California Department of Justice, published 2026-10-19, accessed 2026-10-21 2. [Stipulation between the Plan Administration Trust, the Wind-Down Debtor and the State of California (Doc 2760, Case No. 25-40976)](https://oag.ca.gov/system/files/attachments/press-docs/chrome-2760-joint-stipulation.pdf), U.S. Bankruptcy Court, Eastern District of Missouri, published 2026-10-19, accessed 2026-10-21 3. [$6M settlement reached in 23andMe data breach lawsuit](https://www.mv-voice.com/courts/2026/10/20/6m-settlement-reached-in-23andme-data-breach-lawsuit/), Mountain View Voice, published 2026-10-20, accessed 2026-10-21 ## How this story was checked Automated source check, 2026-10-21 13:20 UTC. Each claim below was compared with the source it cites before publication. What that check does and does not cover: https://sonomos.ai/newsroom/standards/ - The settlement was announced on October 19, 2026, and is described as $6 million, paid by the 23andMe successor Chrome Holding Co. (source 1: https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-6-million-settlement-23andme-litigation) - The stipulation allows California's claims at $6,010,000, payable as a lump sum within 10 days of court approval. (source 2: https://oag.ca.gov/system/files/attachments/press-docs/chrome-2760-joint-stipulation.pdf) - California dismisses its state court action and its appeal of the sale order within four business days of payment. (source 2: https://oag.ca.gov/system/files/attachments/press-docs/chrome-2760-joint-stipulation.pdf) - The breach affected nearly 7 million customers nationwide, including more than 855,000 Californians. (source 1: https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-6-million-settlement-23andme-litigation) Tags: genetic data · data breach · bankruptcy · California ## About the publisher The Sonomos Newsroom is published by Sonomos, which makes Locke, desktop software that detects sensitive data on the user's device and masks it before a prompt reaches an AI service. https://sonomos.ai/locke/ General information about privacy, security and AI, not legal advice. Laws and guidance change; check the dates above and the sources cited before relying on anything here.