$30M 23andMe Data Breach Class Action Settlement
By Steve Levine
Published: November 29, 2025
Status: Proposed Settlement
Settlement Amount: $30,000,000 to $50,000,000
Claim Form Deadline: February 17, 2026
Proof required: Sometimes, for certain claim types
What is the 23andMe Data Breach Class Action About?
Have you used 23andMe DNA tests? You may be part of a nationwide class action settlement if you received notice that your 23andMe data was accessed during the October 2023 breach. Eligible customers can claim cash reimbursement and five years of privacy and genetic monitoring. Here is how to file your claim.23andMe and its data had been the victim of cyberattack that exposed the personal information of about 6.4 million customers in the United States. The incident allegedly affected sensitive personally identifiable information such as genetic data, ancestry reports, family tree details, and other sensitive information that may have later appeared for sale on the dark web. Multiple lawsuits were filed and consolidated as a nationwide class action.
In March 2025, 23andMe filed for chapter 11 bankruptcy in the United States Bankruptcy Court for the Eastern District of Missouri. During the bankruptcy, the company sold its assets and later changed its name to Chrome Holding Co. and ChromeCo, Inc. For purposes of the settlement, the notice still refers to the company as 23andMe.
The class action lawsuits claim that 23andMe failed to adequately protect customer information and that class members suffered harm as a result. 23andMe denies any wrongdoing. No court has decided who is right, but the parties agreed on a settlement that, if approved, will provide monitoring and cash benefits to eligible customers.
Who Is Included in the Settlement?
You are in the settlement class if all of the following are true:• You were a 23andMe customer at any time between May 1, 2023 and October 1, 2023.
• You lived in the United States during that period.
• You received notice from 23andMe that your personal information was compromised in the October 2023 cyber security incident.
You are in a separate statutory subclass if you were a resident of Alaska, California, Illinois, or Oregon at any time between May 1, 2023 and October 1, 2023 and also received notice that your personal information was compromised.
You may also be eligible for a Health Information Claim payment if your notice stated that your health related information was accessed, such as uninterpreted raw genotype data, certain health reports derived from your genetic information, or self reported health condition information.
What Benefits Does the Settlement Provide?
If the Bankruptcy Court approves the settlement and it becomes final, the settlement fund, expected to be between $30 million and $50 million, will pay for:• Five years of Privacy and Medical Shield plus Genetic Monitoring for all settlement class members who enroll in this program. The notice estimates a retail value of about $1,875 for five years of this service.
• Cash payments for valid Extraordinary Claims of unreimbursed costs that meet the settlement criteria, up to $10,000 per person, from a total Extraordinary Claims Fund capped at $8.3 million.
• Health Information Claim payments of up to $165 for eligible people who were notified that their health information was compromised in the cyber security incident, from a fund of about $1,250,000.
• Statutory Cash Claims for eligible residents of Alaska, California, Illinois, and Oregon, currently estimated at about $100 per person and paid from the remaining net settlement fund after payment of Extraordinary and Health Information Claims.
• Service awards for class representatives, attorneys fees up to 25 percent of the settlement fund, litigation expenses up to $500,000, and settlement administration and notice costs.
If the final settlement fund is less than $50 million, these benefit amounts may be reduced proportionally.
Privacy and Medical Shield plus Genetic Monitoring
All settlement class members are entitled to five years of Privacy and Medical Shield plus Genetic Monitoring. This program offers extensive monitoring of the web and dark web, tools to help reduce your digital footprint, and identity theft protection features, including:• Genetic monitoring and health record related alerts.
• Virtual private network, data broker opt out tools, password manager, and private browsing.
• Breach scan tools, dark web and stolen data sites monitoring, and real time authentication alerts.
• Monitoring of health insurance plan IDs, medical beneficiary identifiers, and national provider identifiers.
• Up to $1 million in identity theft and fraud insurance with no deductible, plus victim assistance and support.
You can pre enroll in this program by submitting a claim form by the claims deadline. After the settlement is approved, you will receive instructions and an enrollment code, and you can then activate the service. You may also enroll later during the five year term, but you will only receive monitoring for the remaining time.
Extraordinary Claims up to $10,000
The settlement provides reimbursement for certain unreimbursed, out of pocket costs that qualify as Extraordinary Claims, up to $10,000 per person. These costs must:• Have been incurred between May 1, 2023 and October 2, 2025.
• Be verifiable and unreimbursed.
• Be directly related to the cyber security incident.
Examples include unreimbursed costs tied to identity fraud or falsified tax returns caused by the incident, unreimbursed costs for a physical security or monitoring system purchased in response to the incident, and unreimbursed costs for professional mental health counseling obtained because of the incident.
You must provide documentation supporting these costs and explain how they relate to the 23andMe cyber security incident. If valid Extraordinary Claims exceed the $8.3 million Extraordinary Claims Fund, payments will be reduced on a pro rata basis. If they are less, the unused portion will be added to the Statutory Cash Claim Fund.
Health Information Claim Payments up to $165
If your notice from 23andMe stated that your health information was accessed in the attack, you may qualify for a Health Information Claim payment of up to $165. This covers people whose notice explained that:• Uninterpreted raw genotype data was accessed.
• Certain health reports based on genetic information, such as health predisposition, carrier status, or wellness reports, were accessed.
• Self reported health condition information was accessed.
Health Information Claim payments will be made from a fund of up to $1,250,000. If the valid claims are less than that amount, any remaining balance will be added to the Statutory Cash Claim Fund. You should provide your preferred payment method on the claim form to receive this benefit.
Statutory Cash Claims for Certain States
You may qualify for a Statutory Cash Claim payment if:• You were a resident of Alaska, California, Illinois, or Oregon at any time between May 1, 2023 and October 1, 2023.
• You received notice from 23andMe that your personal information was compromised in the cyber security incident.
Statutory Cash Claim payments are currently estimated at around $100 per person, but the final amount could be higher or lower. Payments will be a pro rata share of the remaining net settlement fund after Extraordinary and Health Information Claims and court approved fees and expenses.
How to File a Claim
You can submit a claim in two ways:• Online at the official settlement website by completing the secure claim form.
• By mailing a paper claim form to the settlement administrator at the address listed in the notice.
For Extraordinary Claims, you will need to upload or mail copies of documents showing what you spent and how it relates to the 23andMe cyber security incident. For Health Information Claims and Statutory Cash Claims, you must complete the relevant sections of the form and provide your preferred payment method.
Online claims must be submitted by 11:59 p.m. Central Time on February 17, 2026. Mailed claim forms must be postmarked by February 17, 2026.
Do I Need Proof to File a 23andMe Claim?
For most people, the settlement does not require you to upload documents or proof. The administrator verifies eligibility using your Class Member ID, your account information, and the notice 23andMe previously sent about the cyber security incident.
The online claim form asks for a Class Member ID. This is a unique number assigned to you by the settlement administrator. It helps confirm that:
• You were a 23andMe customer during the May 1, 2023 to October 1, 2023 period
• You lived in the U.S. at the time
• You received a breach notification from 23andMe
You may find your Class Member ID in:
• The email notice you received from the settlement administrator
• The mailed notice, if one was sent to your physical address
Look for a line labeled Class Member ID, Claim ID, or a similar code.
What If You Do Not Have a Class Member ID?
If you never received the notice or cannot find your ID you can visit the official settlement website and use the contact form to reach out to the 23andMe administrators directly.
Key Deadlines
• Object to the settlement by: December 29, 2025
• Opt out of the settlement by: December 29, 2025
• Submit a claim form by: February 17, 2026
• Final approval hearing: January 20, 2026 at 10:00 a.m. Central Time in the United States Bankruptcy Court for the Eastern District of Missouri, 111 South 10th St., Courtroom 5 North, St. Louis, MO 63102
How Do I Find Class Action Settlements?
Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:Claim Form Website: 23andMeDataSettlement.com
Submit Claim
Official Settlement Notice
Sources
• Official Settlement Website: www.23andMeDataSettlement.com• United States Bankruptcy Court for the Eastern District of Missouri, In re Chrome Holding Co., et al., Case No. 25-40976-357
Filing Class Action Settlement Claims
Please submit only truthful information on any claim form. False or fraudulent claims can be rejected and may lead to penalties. If you are not sure whether you qualify, review the official notice or contact the settlement administrator. OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm, and we do not process or decide claims.
For more class actions keep scrolling below.
RoundUp Cancer Lawsuits: How to Qualify
Status: Open to Claims
Submit Claim
$5.5M Mid America Pet Food Settlementt
Deadline: February 5, 2026
Submit Claim
$30M YouTube Privacy Settlement
Deadline: January 21, 2026
Submit Claim
$4M Frozen Waffles Class Action Settlement
Deadline: Dec 16, 2025
File Claim
$1.9M PetSafe e-Collar Settlement
Deadline: Dec 2, 2025
Payout: $30 - $420
| Class Action Summary | |
| Status | Proposed Settlement |
|---|---|
| Claim Form Deadline | February 17, 2026 |
| Settlement Amount | $30,000,000 to $50,000,000 |
| Category | Data Breach and Privacy |
| Estimated Payout per Person | Extraordinary Claims up to $10,000, Health Information Claims up to $165, Statutory Cash Claims currently estimated around $100 |
| Case Number | 25-40976-357 |
| Case Title | In re Chrome Holding Co., et al. (formerly 23andMe Holding Co. and 23andMe, Inc.) |
| Court | United States Bankruptcy Court for the Eastern District of Missouri |
| Final Approval Hearing | January 20, 2026, at 10:00 a.m. Central Time |
| Claim Website | 23andMeDataSettlement.com |