23andMe Breach Victims to Receive $46.75 Million Settlement

A bankruptcy judge approved a $46.75 million settlement for victims of the 2023 23andMe data breach, affecting approximately 6.9 million individuals. The breach involved hackers using credential stuffing to access around 14,000 accounts, which allowed them to expose sensitive genetic data of connected users. The settlement will be distributed by Kroll Restructuring, which is representing the victims. California Attorney General Rob Bonta criticized 23andMe for failing to protect user data and misleading consumers about the breach's severity. The company, once valued at $6 billion, filed for bankruptcy in March 2025 after the breach and ongoing litigation. Eligible victims can claim compensation, but the payout per person is expected to be minimal after fees. This incident highlights significant risks associated with consumer genomics platforms.

Key Points: • 23andMe's 2023 data breach affected approximately 6.9 million users. • Hackers accessed accounts through credential stuffing, exposing sensitive genetic data. • Victims will receive a total of $46.75 million, with payouts expected to be around $6 per person.