A California bankruptcy court has ordered 23andMe to pay $46.75 million in compensation to victims following a massive 2023 data breach that exposed the genetic information of millions.

Key Points

• A California judge mandated the $46.75 million settlement to be paid by Chrome Holding, which currently controls 23andMe assets.
• The 2023 security incident compromised the sensitive genetic and health data of approximately 6.9 million 23andMe users.
• Funds will be transferred to Kroll Restructuring within five business days for distribution to the affected individuals.
• The UK Information Commissioner's Office previously fined the company £2.31 million for failing to implement adequate data security measures.
• California Attorney General Rob Bonta filed a lawsuit alleging the company misled consumers regarding the severity of the breach.

Why it Matters

This settlement highlights the significant legal and financial liabilities companies face when failing to protect highly sensitive biometric and genetic data. It serves as a critical reminder of the ongoing risks to consumer privacy in the biotechnology sector and the potential for substantial regulatory and judicial consequences following large-scale data breaches.