California secured a $6 million settlement from Chrome Holding Co., formerly 23andMe, on October 19, 2026, resolving claims from a 2023 data breach that exposed the genetic and personal information of approximately 6.9 million customers globally, including over 855,000 Californians.

This settlement shows the ongoing legal consequences for companies failing to protect sensitive genetic data, reinforcing the importance of corporate responsibility in a sector dealing with highly personal information. Consumers are reminded of their right to control their genetic data, including requesting deletion and destruction of samples.

What the Records Show

23andMe filed for Chapter 11 bankruptcy in March 2025, citing the breach and related litigation. Its assets were later sold for $305 million to TTAM Research Institute, a nonprofit controlled by 23andMe co-founder Anne Wojcicki. California had tried to block this sale, arguing it violated state law by selling customer data without explicit consent. A U.S. bankruptcy judge had previously approved a separate $46.75 million settlement for data breach victims on July 8, 2026.

What the Attorney General Said

What we could not confirm