Victims of 23andMe data breach to get $47m payout, judge rules

Victims of a 2023 data breach at genetics testing company 23andMe are set to receive a $46.75 million payout, following a ruling by a California bankruptcy court judge. The payout will be made by Chrome Holding, which took control of 23andMe after its bankruptcy and is operated by co-founder Anne Wojcicki. The settlement will be paid to Kroll Restructuring, which represents the victims, within five business days. The 2023 hack exposed the data of up to 6.9 million people, including highly personal genetic profiles and family history information. The breach led to investigations and fines, including a £2.31m fine from the UK's Information Commissioner's Office, which found 23andMe failed to secure sensitive user data. California's Attorney General also sued the company, alleging it failed to take basic steps to protect data and lied to consumers about the severity of the breach. 23andMe, once valued at $6bn, filed for bankruptcy in early 2025 and has never turned a profit.