Published
November 29, 2025
Updated
July 15, 2026
About 6.4 million U.S. 23andMe customers whose data was exposed in the 2023 breach were eligible for cash payments up to $10,000 and five years of genetic monitoring — but the February 17, 2026 claim deadline has passed and the settlement is now closed.
Status
Approved — Distribution Ordered
Class settlement approved Jan 30, 2026 · bankruptcy court approved the $46.75M deal July 7, 2026 · the order directs the funds to administrator Kroll within five business days, after which payments are distributed to claimants
Claim Deadline
February 17, 2026 (passed)
Settlement / Distribution
$46.75 million (capped at $50M)
~$32.5M to resolve class claims · more than $14M to administrator Kroll
Estimated Payout
~$100 to $10,000
Statutory Cash ~$100 · Health Info up to $165 · Extraordinary Claims up to $10,000 · plus 5 yrs genetic monitoring
Proof Required
Yes
Class Member ID from the mailed/emailed notice was required to file; Extraordinary Claims required documentation
What Was This Settlement About?
In October 2023, 23andMe disclosed a cyberattack that exposed the personal information of about 6.4 million customers in the United States. Plaintiffs alleged the incident affected sensitive personally identifiable information such as genetic data, ancestry reports, and family tree details, some of which later appeared for sale on the dark web. Multiple lawsuits were filed and consolidated as a nationwide class action.In March 2025, 23andMe filed for Chapter 11 bankruptcy in the U.S. Bankruptcy Court for the Eastern District of Missouri. During the bankruptcy the company sold its assets and changed its legal name to Chrome Holding Co. and ChromeCo, Inc.; for ease of reference the settlement notice still refers to the company as 23andMe. For a fuller account of the bankruptcy and what it meant for the case, see our 23andMe bankruptcy explainer.
The class action lawsuits claimed that 23andMe failed to adequately protect customer information. 23andMe denied any wrongdoing, and no court decided who was right. The parties reached a settlement, which the Bankruptcy Court granted final approval on January 30, 2026. Important: the claim deadline of February 17, 2026 has passed, so this settlement is now closed and no new claims can be filed.
The $46.75 Million Distribution (June 2026 Update)
The settlement was approved with a cap of $50 million. In a June 2026 filing, the plan administrator set the actual distribution at $46.75 million — $3.25 million below the cap. Of that amount, about $32.5 million is allotted to resolve the consolidated class-action claims, and more than $14 million is being used to pay the settlement and claims administrator, Kroll.According to the official settlement website, settlement payments will not be distributed until the bankruptcy reconciliation process is resolved, which may take several months or longer. Class members should watch the official settlement website for payment timing. The deadline to submit a Deficiency Cure Form (to fix a claim flagged as deficient) is June 12, 2026.
Bankruptcy Court Approves the Distribution (July 2026 Update)
On July 7, 2026, the U.S. Bankruptcy Court for the Eastern District of Missouri approved the $46.75 million settlement between the 23andMe plan-administration trust and the data breach claimants, clearing a key step in the bankruptcy reconciliation. Reuters, Law360, Bloomberg Law, and Insurance Journal reported that the court found the deal fair and in the best interest of the trust overseen by the company's bankruptcy administrator.As part of the July 7 order, the court directed the settlement funds to be transferred to the administrator, Kroll, no later than five business days after the ruling — by roughly July 14, 2026 — after which Kroll distributes payments to eligible claimants, according to reporting by Reuters and Insurance Journal. As of mid-July 2026, there is no public confirmation that individual checks have been mailed; the administrator has said benefits are held until the bankruptcy reconciliation process concludes, which may take several months or longer. No exact mailing date for individual checks has been published, and payments could still be affected by any appeal; class members will be notified by email or through the official settlement website when payments are issued.
Related: California Enforcement Ruling (July 2026)
In a separate matter from the class settlement, Reuters reported that on July 10, 2026 the bankruptcy court ruled 23andMe's Chapter 11 reorganization plan bars the State of California from seeking monetary damages against the company's successor over the 2023 breach. The court gave California 14 days to either dismiss or amend its separate state-court lawsuit to drop the money-damages claims; non-monetary remedies were not barred. California's underlying accusations — that 23andMe allegedly ignored warnings and downplayed the breach — are allegations that have not been decided on the merits. This state enforcement dispute is distinct from the class action settlement described above and does not change the $46.75 million distribution or who qualified for it.Related: $18 Million Multistate Attorney General Settlement (July 2026)
On July 14, 2026, a coalition of more than 40 state attorneys general announced a separate $18 million settlement of their bankruptcy claims against 23andMe over the same 2023 breach. According to the participating attorneys general, the states held about $150 million in allowed claims, but because the bankruptcy estate holds a finite amount of money against many competing claims, their recovery was capped at $18 million, paid from available bankruptcy funds. The states said 23andMe also agreed to non-monetary data-security commitments — including safeguards against credential-stuffing attacks, rate-limiting and intrusion-prevention measures, and improved logging and monitoring.This multistate settlement resolves the states' own claims in the bankruptcy and is separate from the $46.75 million consumer class-action distribution described above — it does not add to or change what individual class members receive. California did not join the multistate group; it is pursuing its own separate enforcement action (see the section above). The states alleged that 23andMe used unreasonable data-security practices in the lead-up to the breach; 23andMe resolved those claims through the bankruptcy without the allegations being decided by a court.
Who Qualified?
You were in the settlement class if all of the following were true: you were a 23andMe customer at any time between May 1, 2023 and October 1, 2023; you lived in the United States during that period; and you received notice from 23andMe that your personal information was compromised in the October 2023 cyber security incident.You were in a separate statutory subclass if you were a resident of Alaska, California, Illinois, or Oregon during that period and also received a breach notice. You may also have been eligible for a Health Information Claim if your notice stated that your health-related information — such as uninterpreted raw genotype data, certain health reports, or self-reported health condition information — was accessed.
How Much Could You Get?
Eligible class members could receive a combination of the following benefits, funded from the settlement:• Privacy & Medical Shield plus Genetic Monitoring: five years of monitoring (web and dark-web monitoring, identity-theft protection, and up to $1 million in identity-theft insurance) for all class members who enroll. The notice estimated a retail value of about $1,875.
• Extraordinary Claims — up to $10,000: reimbursement for documented, unreimbursed out-of-pocket costs directly related to the incident, from an Extraordinary Claims Fund capped at $8.3 million. Documentation was required, and payments are reduced pro rata if valid claims exceed the fund.
• Health Information Claims — up to $165: for people whose notice said their health information was accessed, from a fund of up to $1,250,000.
• Statutory Cash Claims — about $100: for eligible residents of Alaska, California, Illinois, and Oregon, paid pro rata from the remaining net fund. The final amount could be higher or lower depending on the number of valid claims.
Because the final distribution of $46.75 million came in below the $50 million cap, some benefit amounts may be reduced proportionally from the maximums above.
Did You Need Proof to File?
Yes. The online claim form required a Class Member ID — a unique number issued by the settlement administrator and printed in the mailed or emailed breach notice — so this settlement was proof-required even for the cash tiers. A claimant who never received a notice could not simply file without that identifier. Extraordinary Claims for up to $10,000 additionally required documentation (such as bank statements or receipts) showing unreimbursed costs tied to the breach.If you filed a claim but it was flagged as deficient, the deadline to submit a Deficiency Cure Form is June 12, 2026. For questions about a Class Member ID or a deficient claim, use the contact form on the official settlement website.
Key Dates
Opt-Out / Objection Deadline: December 29, 2025 (passed)Final Approval Hearing: January 20, 2026
Final Approval Granted: January 30, 2026
Claim Deadline: February 17, 2026 (passed)
Deficiency Cure Form Deadline: June 12, 2026
Frequently Asked Questions
Is the 23andMe data breach settlement still open?
No. The Court granted final approval on January 30, 2026 and the claim deadline of February 17, 2026 has passed, so no new claims can be filed. The deadline to submit a Deficiency Cure Form is June 12, 2026.
How much is the 23andMe data breach settlement?
The settlement was capped at $50 million. In June 2026 the plan administrator set the actual distribution at $46.75 million — about $32.5 million to resolve the class claims and more than $14 million to administrator Kroll. Individual cash payments ranged from about $100 up to $10,000 for documented Extraordinary Claims, plus five years of genetic monitoring.
When will 23andMe settlement payments be sent?
The bankruptcy court approved the $46.75 million distribution on July 7, 2026 and directed the funds to be transferred to administrator Kroll within five business days — by about July 14, 2026 — after which Kroll distributes payments to eligible claimants. No exact mailing date for individual checks has been published, and payments could still be affected by any appeal. Check the official settlement website for payment updates.
Did the 23andMe settlement require proof?
Yes. The online claim form required a Class Member ID from the mailed or emailed notice, so the settlement was proof-required. Extraordinary Claims for up to $10,000 also required documentation of unreimbursed, breach-related costs.
Official Settlement Notice
Sources
- Official Settlement Website — 23andMeDataSettlement.com
- In re Chrome Holding Co., et al. (f/k/a 23andMe Holding Co. and 23andMe, Inc.), Case No. 25-40976-357, U.S. Bankruptcy Court for the Eastern District of Missouri
- In re: 23andMe, Inc. Customer Data Security Breach Litigation, Case No. 24-md-03098-EMC, U.S. District Court, Northern District of California
- Insurance Journal, “Claimants of 23andMe Data Breach to Get $46.75M in Settlement Deal” (June 12, 2026): insurancejournal.com
- Insurance Journal, “Judge Approves $46.75M Payout for 23andMe Data Breach Victims” (July 7, 2026): insurancejournal.com
- Reuters via CTV News, “Judge approves US$46.75M payout for 23andMe data breach victims” (July 2026): ctvnews.ca
- Insurance Journal via Reuters, “California Cannot Seek Damages From 23andMe Successor Over 2023 Data Breach” (July 13, 2026): insurancejournal.com
- Pennsylvania Office of Attorney General, “AG Sunday Announces $18 Million National Settlement with 23andMe Over Genetic Data Breach” (July 14, 2026): attorneygeneral.gov
- New Hampshire Department of Justice, “AG Formella Announces $18 Million Multistate Settlement with 23andMe Over Genetic Data Breach” (July 14, 2026): doj.nh.gov
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more class actions keep scrolling below.
Settlement Amount
$46.75 million distribution (capped at $50 million)
Case Title
In re Chrome Holding Co., et al. (f/k/a 23andMe Holding Co. and 23andMe, Inc.)
Case Number
25-40976-357
Court
U.S. Bankruptcy Court, Eastern District of Missouri
Final Approval
Granted January 30, 2026
Hearing held January 20, 2026; $46.75M distribution set June 2026; bankruptcy court approved the deal July 7, 2026
Administrator
Kroll Settlement Administration LLC
Status
Closed — claim deadline February 17, 2026 has passed; bankruptcy court approved the $46.75M deal July 7, 2026 and ordered funds to administrator Kroll within five business days, after which payments are distributed
Official Website
23andMe Data Settlement.com
