NEWS

23andMe Successor Settles with California for $6 Million Over Cybersecurity Failings

Chrome Holding Company, formerly 23andMe, will pay California $6M over data protection failures behind the 2023 breach that hit nearly 7 million people.

Dylan H.

News Desk

October 20, 2026
2 min read
23andMe Successor Settles with California for $6 Million Over Cybersecurity Failings

California Secures $6 Million From 23andMe's Successor

California Attorney General Rob Bonta announced a $6 million settlement with Chrome Holding Company, the entity formerly known as 23andMe. The settlement resolves allegations that the company did not adequately protect customers' personal and genetic data before a 2023 breach that exposed sensitive information on nearly 7 million people.


Key Terms

  • $6 million payment to California
  • Affected consumers keep their right to delete their data and to have their genetic samples destroyed
  • The deal is pending approval from the U.S. Bankruptcy Court for the Eastern District of Missouri

Background

23andMe filed for bankruptcy in March 2025. Customer saliva samples and genetic data were sold to TTAM Research Institute, a nonprofit created by former CEO Anne Wojcicki, who is also CEO of Chrome Holding Company. TTAM says it is not involved in matters related to Chrome Holding and had no role in this settlement. The company's business had already declined as demand for genetic testing shrank, and the breach was described as the final blow.

In July, 23andMe settled with 42 other state attorneys general for $18 million.


Why It Matters

Bonta stated that companies cannot avoid state consumer protection and privacy laws by filing for bankruptcy. Genetic data cannot be changed like a password, so breaches of it carry permanent risk for the individuals and their relatives. The case is a reference point for how regulators will treat sensitive data held by companies in insolvency.

Source: The Record.