California AG Secures $6 Million Settlement Over 23andMe Data Breach

California Attorney General Rob Bonta announced a $6 million settlement with Chrome Holding Co., the successor to 23andMe, on Oct. 19, 2026. The deal, filed in a Missouri bankruptcy court, resolves state claims that the company failed to protect customers’ genetic information after a 2023 breach affecting nearly 7 million people, including over 855,000 Californians.

Why the Settlement Was Needed

The state sued the company in California court, alleging that its security practices were unreasonable and that it misled customers about data safety. A parallel objection was raised in the bankruptcy case when 23andMe tried to sell customers’ genetic data and samples without the explicit consent required by California’s Genetic Information Privacy Act. Both the bankruptcy and district courts denied the objection, prompting the settlement.

What the Settlement Means for Consumers

The $6 million payment resolves the pending claims, but the most important outcome for Californians is the reaffirmation of their right to request deletion of their genetic data and destruction of their samples. The settlement does not change the fact that the data was already sold, but it gives consumers a clear path to have their information removed.

How to Delete Your Genetic Data or Samples

Consumers can follow these steps on the 23andMe website:

1. Log into your account.
2. Open the “Settings” page.
3. Find the “23andMe Data” section and click “View.”
4. Download a copy of your data if you wish.
5. Scroll to “Delete Data” and select “Permanently Delete Data.”
6. Confirm the request via the email link sent by 23andMe.

To destroy a stored saliva sample, adjust the preference under “Preferences” in your account settings. To revoke research consent, use the “Research and Product Consents” section.

When to Seek Legal Help

If you have trouble deleting your data, receive a confusing notice, or suspect further misuse of your genetic information, consulting a consumer‑privacy attorney can help you protect your rights and ensure the company follows California law.

This article is general information based on California Attorney General and court or agency records available at publication time. It is not legal advice; laws and deadlines differ by state and by case. Published October 19, 2026.