23andMe to Pay California $6 Million to End Breach and Data-Transfer Claims

23andMe’s holding company has agreed to pay California $6 million to resolve state claims that the genetic-testing company failed to protect customer data in a 2023 breach affecting nearly 7 million people, including about 855,000 Californians. The proposed settlement, which requires bankruptcy-court approval, also ends California’s appeal challenging the transfer of customer genetic data and samples during 23andMe’s bankruptcy sale to the nonprofit TTAM Research Institute, founded by co-founder Anne Wojcicki. Customers retain the right to request deletion of their genetic data and destruction of their saliva samples, and may revoke research-use permission. The settlement follows 23andMe’s 2025 bankruptcy and separate legal actions stemming from the breach.