23andMe Customer Data Security Breach Class Action Settlement
U.S. residents who were 23andMe customers between May 1, 2023, and October 1, 2023, and received a notice that their personal information was compromised.
Settlement Closed
Who’s Eligible
- General Eligibility: You were a customer of 23andMe (now Chrome) at any time during May 1, 2023, through October 1, 2023; resided in the U.S. during the Cyber Security Incident Period; and received a notice from 23andMe notifying you that your personal information was compromised.
- Statutory Subclass: You meet the general eligibility criteria AND were a resident of Alaska, California, Illinois, or Oregon during the Cyber Security Incident Period.
- Health Information Claim: You meet the general eligibility criteria AND received notice that your health information (e.g., raw genotype data, health reports) was involved.
Eligible States
Claim Deadline
What You Need to Do to Get Paid
File a Claim Form online at www.23andMeDataSettlement.com before the deadline 11:59 p.m. Central Time on February 17, 2026, or mail a completed paper form to the Settlement Administrator postmarked by February 17, 2026.
For Extraordinary Claims, reasonable documentation is required, such as credit card statements, bank statements, invoices, receipts, or police reports showing unreimbursed costs. Health Information and Statutory Claims rely on verification of residency and receipt of notice.
Settlement Payout
- Extraordinary Claims: Reimbursement of up to $10,000 for documented unreimbursed costs (e.g., identity fraud, falsified tax returns, physical security systems, mental health counseling).
- Health Information Claims: Cash payment of up to $165 for those notified that their health information was involved.
- Statutory Cash Claims: Estimated $100 for residents of Alaska, California, Illinois, or Oregon who received a breach notice.
- Monitoring Service: 5 years of Privacy & Medical Shield + Genetic Monitoring.
- Settlement Fund: Between $30 million and $50 million
- Attorneys’ Fees: Up to 25% of the Settlement Fund
- Litigation Expenses: Up to $500,000
- Service Awards: Up to $1,000 each (total $34,000)
- Administration Costs: Estimated $918,000
- Extraordinary Claims Cap: Up to $8.3 million of the Net Settlement Fund
- Health Information Claims Cap: Up to $1.25 million of the Net Settlement Fund
Background of the Lawsuit
In October 2023, 23andMe announced a cyberattack affecting approximately 6.4 million U.S. residents. Lawsuits were filed alleging the company failed to protect personal information. In March 2025, 23andMe (now Chrome Holding Co.) initiated Chapter 11 bankruptcy proceedings. This settlement resolves the consumer data breach claims within the bankruptcy case.
Frequently Asked Questions
What is this lawsuit about?
Who is included in the Settlement?
What benefits are available?
When is the deadline to file a claim?
When will I get my payment?
Settlement Administrator
PO Box 22539, New York, NY 10150-5391
Case Details
Listing Information
Discussion
Disclaimer
The information on this website is free to access and provided for general educational and informational purposes only. It is not legal advice. We summarise settlement information from official notices, court documents, settlement websites, administrators, and other primary sources where available.
Settlement details and deadlines may change. Always refer to the official settlement website or consult a licensed attorney for advice specific to your situation.
Every listing is reviewed by our research team. Found an error? Let us know. Learn more about how we verify our information.
