23andMe Data Breach Settlement
Last verified September 18, 2026Source: law-firm:keller-rohrbackHow ClaimWatch verifies cases
This settlement is closed to new claims — the deadline was February 17, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
In August and October 2023, cybercriminals stole personal data of approximately 7 million 23andMe users from the company's systems. The compromised data included names, genders, dates of birth, ancestors' birth locations, family names, family tree information, profile pictures, geographic locations, and genetic information such as maternal and paternal haplogroup results and predicted genetic relationships.
Do you qualify?
The settlement class consists of 23andMe customers whose personal information and genetic data were compromised in the 2023 data breach. This includes approximately 7 million users whose PII and genetic information was accessed by unauthorized individuals.
What you can claim
Read from the official settlement notice. Confirm the terms that apply to you on the administrator's site before filing.
Extraordinary Claims Reimbursement
$10,000 eachMonetary reimbursement for unreimbursed losses incurred as the direct result of the Cyber Security Incident, including expenses for identity fraud, installation of physical security or monitoring systems, and professional mental health treatment, up to $10,000 per claim.
Statutory Damages Cash Payments (Genetic Privacy Law States)
Cash payments for Settlement Class Members who were residents of states with genetic privacy laws that provide for statutory damages, specifically Alaska, California, Illinois, and Oregon.
Health Information Compromise Cash Payments
Cash payments for Settlement Class Members that had certain health information compromised in the Cyber Security Incident.
Who is in the class
U.S. persons whose personal information was impacted by the Cyber Security Incident announced by 23andMe in October 2023 that impacted approximately 6.4 million people in the United States, involving unauthorized access to personal information, including genetic information as well as limited health information.
Quoted from the settlement notice.
How to file
Class members could submit claims through the settlement website at https://23andmedatasettlement.com. The deadline to submit claims passed on February 17, 2026. Settlement benefits will not be distributed until the bankruptcy reconciliation process is resolved, which may take several months or longer.
Common questions
- What is the claim deadline for the 23andMe Data Breach Settlement?
- This settlement is closed to new claims — the deadline was February 17, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Is the 23andMe Data Breach Settlement notice real, or a scam?
- Kroll is the settlement administrator for this case. Claims are filed at kellerrohrback.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the 23andMe Data Breach Settlement be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for January 20, 2026; no payments can be issued before a settlement receives final approval.
Who's involved
Counsel for plaintiffs
Parties and counsel from the public court docket. Listing an attorney here isn't an endorsement, and ClaimWatch isn't affiliated with any of them.
In the news
- Utah, 40 other states reach $18M settlement with 23andMe after data breach, bankruptcyBiztoc.com · July 23, 2026
- 23andMe settles multistate data breach lawsuit for $18MTechtarget.com · July 21, 2026
- 23andMe bankruptcy: Georgia to get more than $452k in settlementBiztoc.com · July 19, 2026
- 23andMe Faces New Security Mandates in $18m Data Breach SettlementInfosecurity Magazine · July 17, 2026
Headlines via NewsAPI. ClaimWatch isn't affiliated with these publications.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More privacy settlements
View all →Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreForbes Media Website Tracker Class Action Settlement
Forbes Media collected IP addresses and unique identifiers without consent using trackers on its websites between December 20, 2023 and June 11, 2026, and shared this data with third parties, allegedly in violation of California's Invasion of Privacy Act and Unfair Competition Law. Forbes denies these allegations and any wrongdoing.
…morePro rata payments from the Settlement Fund after deductions for administration costs, court-awarded attorneys' fees and costs, and incentive awards
American Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members