● Covered by 1 source · 1 reportMedium impact1 neutral
23andMe Successor Settles with California for $6 Million Over 2023 Data Breach
Key points
- Chrome Holding Company settled with California for $6 million.
- Settlement addresses cybersecurity failings from a 2023 data breach.
- Nearly 7 million people were affected by the breach.
- Consumers retain rights to data deletion and genetic sample destruction.
Settlement Reached for Data Breach
Chrome Holding Company, previously known as 23andMe, has agreed to a $6 million settlement with California. This agreement resolves claims that the company failed to adequately protect customer personal and genetic data, which resulted in a significant data breach in 2023. The breach exposed sensitive information belonging to approximately 7 million individuals.
Bankruptcy and Data Rights
The settlement is currently awaiting approval from the U.S. Bankruptcy Court in the Eastern District of Missouri. California Attorney General Rob Bonta announced that the agreement ensures affected consumers retain the right to delete their data and request the destruction of their genetic samples. This follows 23andMe's bankruptcy filing in March 2025, where it sold customer saliva samples and genetic data to TTAM Research Institute.
Company Structure and Responsibility
Anne Wojcicki, 23andMe's former founder and CEO, also leads Chrome Holding Company, the entity involved in this settlement. TTAM Research Institute, a nonprofit created by Wojcicki, stated it is an independent organization and was not involved in the matters related to Chrome Holding Co. or the settlement. Chrome Holding Company does not have authorized personnel to speak to the media.
Broader Legal Actions
This settlement with California follows a previous agreement in July where 23andMe settled with a coalition of 42 other state attorneys general for $18 million. The California Attorney General emphasized that companies cannot avoid consumer protection and privacy laws by filing for bankruptcy.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Chrome Holding Company, formerly 23andMe, agreed to pay California $6 million to resolve allegations of cybersecurity failings that led to a 2023 data breach affecting nearly 7 million people. This settlement, pending bankruptcy court approval, ensures affected consumers can delete their data and destroy genetic samples.