INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

23andMe Successor Settles with California for $6 Million Over Failings

| 2026-10-20 18:32 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A holding company formerly known as 23andMe has agreed to pay California $6 million to resolve allegations that it did not effectively shield customers' personal and genetic data, enabling a massive 2023 breach that exposed sensitive information belonging to nearly 7 million people. The settlement is pending approval by the U.S. Bankruptcy Court in the Eastern District of Missouri and ensures affected consumers maintain the right to delete their data and order genetic samples be destroyed. In March 2025, 23andMe filed for bankruptcy and sold customers' saliva samples and genetic data to the TTAM Research Institute, a nonprofit created by 23andMe's former founder and CEO Anne Wojcicki.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎March 2025
The TTAM Research Institute, a nonprofit created by 23andMe's former founder and CEO Anne Wojcicki, sold customers' genetic data to Chrome Holding Company after 23andMe filed for bankruptcy in March 2025.
organisation the TTAM Research Institute
In March 2025, 23andMe filed for bankruptcy and sold customers’ saliva samples and genetic data to the TTAM Research Institute, a nonprofit created by 23andMe’s former founder and CEO Anne Wojkicki.
organisation the Chrome Holding Company
In addition to running 23andMe, Wojcicki is the CEO of the Chrome Holding Company, the entity that settled with Bonta.
organisation TTAM
A spokesperson for TTAM said in a statement that the organization is a “newly established independent nonprofit organization and is not involved in matters related to Chrome Holding Co., formerly known as 23andMe, Inc.”  “The institute was not involved in the matters and has no role in the settlement.”
organisation Chrome Holding Co.
A spokesperson for TTAM said in a statement that the organization is a “newly established independent nonprofit organization and is not involved in matters related to Chrome Holding Co., formerly known as 23andMe, Inc.”  “The institute was not involved in the matters and has no role in the settlement.”
organisation Bonta
“23andMe collected genetic data about millions of people and failed to meet its obligation to keep that information safe,” Bonta said.
‎2026/10/20
A holding company formerly known as 23andMe agreed to pay California $6 million to resolve allegations that it failed to effectively shield customers' personal and genetic data.
financial $6 California
A holding company formerly known as 23andMe has agreed to pay California $6 million to resolve allegations that it did not effectively shield customers’ personal and genetic data, enabling a massive 2023 breach that exposed sensitive information belonging to nearly 7 million people.
organisation the U.S. Bankruptcy Court
The settlement is pending approval by the U.S. Bankruptcy Court in the Eastern District of Missouri and ensures affected consumers maintain the right to delete their data and order genetic samples be destroyed, according to a press release Monday from California Attorney General Rob Bonta.
Tactical Metrics
Metrics
financial
6,000,000
Financial Impact / Stolen Funds
A holding company formerly known as 23andMe has agreed to pay California $6 million to resolve allegations that it did not effectively shield customers’ personal and genetic data, enabling a massive 2023 breach that exposed sensitive information belonging to nearly 7 million people.
Intelligence Sources
TheRecord 2026-10-20