California Attorney General Rob Bonta has filed a lawsuit against 23andMe, alleging the company failed to protect the sensitive genetic and personal data of nearly seven million users.

Key Points

• The lawsuit targets Chrome Holding Co., the corporate entity representing 23andMe following its recent bankruptcy proceedings.
• Hackers allegedly accessed user accounts for five months in 2023, including ancestry and genetic health information sold on the dark web.
• Court documents claim the company ignored over one million unauthorized login attempts to a single account in one day.
• 23andMe previously agreed to a $30 million settlement to resolve a separate class-action lawsuit regarding the same data breach.
• The company was recently sold for $305 million to the TTAM Research Institute, a nonprofit led by former CEO Anne Wojcicki.

Why it Matters

This legal action highlights the significant privacy risks associated with storing highly sensitive biological data in the consumer genetic testing industry. The case underscores the potential for severe regulatory consequences when companies fail to implement adequate cybersecurity safeguards for their customers' most personal information.