23andMe Agrees to $6 Million California Settlement Over 2023 Data Breach
Genetic testing pioneer **23andMe**, now known as **Chrome Holding Company**, has reached a $6 million settlement with California to resolve allegations of inadequate data protection leading to a massive 2023 breach. The incident exposed sensitive personal and genetic data belonging to nearly 7 million individuals. This agreement, pending bankruptcy court approval, ensures consumer rights to data deletion and genetic sample destruction are upheld.
A holding company formerly known as **23andMe** has agreed to pay California $6 million to resolve allegations that it did not effectively shield customersโ personal and genetic data, enabling a massive 2023 breach that exposed sensitive information belonging to nearly 7 million people.
### Settlement Details and Consumer Rights
The settlement is pending approval by the U.S. Bankruptcy Court in the Eastern District of Missouri. According to a press release from California Attorney General **Rob Bonta**, this agreement ensures affected consumers maintain the right to delete their data and order genetic samples to be destroyed.
### Bankruptcy and Corporate Restructuring
In March 2025, **23andMe** filed for bankruptcy and sold customersโ saliva samples and genetic data to the **TTAM Research Institute**, a nonprofit created by **23andMe**โs former founder and CEO **Anne Wojcicki**.
**Wojcicki**, in addition to her past role at **23andMe**, is the CEO of the **Chrome Holding Company**, the entity that settled with Bonta.
### TTAM Research Institute's Stance
A spokesperson for **TTAM** stated that the organization is a โnewly established independent nonprofit organization and is not involved in matters related to **Chrome Holding Co.**, formerly known as **23andMe, Inc.**โ The institute emphasized it was not involved in the matters and has no role in the settlement.
**Chrome Holding Company** reportedly does not have any personnel authorized to speak to the media.
### The Breach's Impact on 23andMe
**23andMe** was once a prominent Silicon Valley entity, but its market fortunes declined as the demand for genetic testing services contracted. The 2023 data breach proved to be a critical blow.
Attorney General **Bonta** underscored the gravity of the situation, stating, โ**23andMe** collected genetic data about millions of people and failed to meet its obligation to keep that information safe. Companies cannot evade Californiaโs consumer protection and privacy laws by filing for bankruptcy.โ
This California settlement follows an earlier agreement in July, where **23andMe** settled with a coalition of 42 additional state attorneys general for $18 million.