Overview
- A coalition of 42 state attorneys general secured an $18 million immediate distribution from 23andMe’s bankruptcy estate, a payment that state offices began announcing Monday.
- A separate $46.75 million class-action settlement for eligible consumers has been transferred to Kroll for claims administration and actual consumer payments are likely to take months as bankruptcy reconciliation continues.
- Investigators found that the October 2023 intrusion that exposed about 6.9 million customers’ data resulted from preventable security failures, including no multifactor authentication, no password blocklist checks, insufficient rate limiting, and poor logging and breach detection.
- States will use their allotted shares for consumer protection work, privacy enforcement, education, and litigation costs rather than direct individual payouts, with specific state shares already posted by offices such as Kentucky, Georgia, South Carolina, Ohio, and Indiana.
- 23andMe filed for Chapter 11 in March 2025 and sold its assets to TTAM Research Institute, now reregistered as 23andMe Research Institute, which must meet new security and oversight requirements set in the sale terms.