23andMe data-breach victims to receive $47m under court-approved settlement
A court approved a $47 million settlement for people affected by the 2023 breach of 23andMe, the genetic-testing company whose systems were compromised in a credential-stuffing attack that exposed personal information tied to millions of accounts. The payout resolves consolidated litigation over the incident, which drew particular concern because the stolen records included ancestry and health-related data that cannot be reset like a password.
The settlement lands as 23andMe’s business has deteriorated, underscoring how the costs of a breach outlast the event itself for firms holding sensitive genetic information. For consumers, the case is a reminder that DNA data, once exposed, stays exposed — a durability that regulators and courts are still working out how to price.