23andMe Data Breach Victims to Receive $47 Million Payout; Judge Approves Settlement after 6.9 Million Profiles Exposed

A California bankruptcy court judge has approved a $46.75 million settlement for victims of the 2023 23andMe data breach, which exposed the sensitive genetic and personal information of up to 6.9 million people. The payout comes as the company's successor, Chrome Holding, faces ongoing legal battles including a lawsuit from California's Attorney General.

The victims of one of the most sensitive data breaches in recent history are finally getting their day in court. A California bankruptcy judge has approved a $46.75 million settlement for victims of the 2023 23andMe data breach, which exposed the genetic profiles of millions of users.

Judge Brian Walsh ruled on July 6 that the settlement is "fair and equitable," ordering Chrome holding the company that took control of 23andMe after its bankruptcy to pay out the compensation. The funds will be transferred to Kroll Restructuring within five business days for distribution to victims.

The breach originated when hackers targeted roughly 14,000 user accounts in October 2023. Because 23andMe's platform links users to their relatives through DNA matching, the hackers were able to access the profiles of millions of relatives, ultimately compromising the highly personal data of up to 6.9 million people nearly half of all 23andMe customers. The leaked information included names, dates of birth, family trees, geographic locations, and genetic markers related to health and ancestry.

The settlement amount is reduced by $14.29 million previously paid out, meaning an additional $32.46 million will now be distributed. Victims can claim up to $10,000 for extraordinary claims, $165 for health information claims, or an estimated $100 statutory cash payment, plus five years of genetic monitoring services. The deadline for claims passed in February 2026.

The legal fallout from the breach is far from over. California Attorney General Rob Bonta filed a lawsuit in May 2026 against Chrome Holding, accusing the company of "failing to take basic steps to protect users' data" and lying to consumers about the severity of the breach. The UK's Information Commissioner's Office also fined 23andMe £2.31 million for inadequate security measures.

"Chrome Holding, which operates under the name TTAM Research Institute, is operated by 23andMe's co-founder, Anne Wojcicki. She won the company's assets last year through a bankruptcy auction with a bid of $305 million."

23andMe filed for bankruptcy in March 2025, citing the data breach, related litigation, falling demand, and increased competition. The company was once valued at $6 billion after going public in 2021 but never turned a profit.

Here is the question this payout raises. A California bankruptcy judge has ordered $46.75 million to be paid to the victims of a data breach that exposed the genetic profiles of 6.9 million people. But with the California Attorney General still suing the company's successor, and the UK regulator already fining it millions, is $47 million a price tag for negligence or just a cost of doing business in the data age?

As victims of the 23andMe data breach receive a $47 million payout, The Silicon Review asks a final question. When a company that holds your DNA fails to protect it, can any amount of money ever really make it right?

FAQ:

Q: What is the 23andMe data breach settlement?
A: A California bankruptcy judge approved a $46.75 million settlement for victims of the 2023 23andMe data breach, which exposed the genetic and personal information of up to 6.9 million people.

Q: How many people were affected by the 23andMe data breach?
A: The breach compromised the data of up to 6.9 million people, nearly half of all 23andMe customers, after hackers accessed roughly 14,000 user accounts and then the profiles of their relatives.

Q: What information was exposed in the 23andMe breach?
A: Exposed data included names, genders, dates of birth, ancestors' birth locations, family trees, profile pictures, geographic locations, and genetic information including haplogroup results .

Q: How much compensation can victims receive?
A: Victims can claim up to $10,000 for extraordinary claims, $165 for health information claims, or an estimated $100 statutory cash payment, plus five years of genetic monitoring services.

Q: Who is Chrome Holding and how is it connected to 23andMe?
A: Chrome Holding is the successor company that took control of 23andMe's assets after its bankruptcy. It is operated by 23andMe co-founder Anne Wojcicki under the name TTAM Research Institute.

Q: Is the legal fallout from the 23andMe data breach over?
A: No. California Attorney General Rob Bonta is still suing Chrome Holding, alleging the company failed to protect user data and misled consumers about the breach's severity.