You Can Now Claim Payment for the 23andMe Data Breach
If you were affected by the 23andMe data breach that compromised 14,000 user accounts as well as 6.9 million DNA and Family Tree profiles , you can now claim compensation .
Following a credential stuffing attack in 2023, 23AndMe agreed to pay $30 million to affected consumers in 2024. Earlier this year, the genetic testing company filed for Chapter 11 bankruptcy ( raising new privacy concerns regarding the potential sale of customer data), and settlement money will soon be distributed through the proceedings.
How much will you get from 23andMe
If everyone whose accounts were affected received an equal payout, that would be about $4.35 per person. However, users with “extraordinary claims”—those who experienced identity theft or a fraudulent tax return as a result of the breach—may be eligible for up to $10,000 in reimbursement for verifiable expenses, including costs for physical or cybersecurity systems and mental health treatment.
Individuals living in Alaska, California, Illinois and Oregon will receive approximately $100 thanks to state privacy laws, and the same amount will likely be paid to users whose personal health information was compromised.
The settlement also included three years of identity monitoring services under a special program called “Confidentiality and Medical Shield + Genetic Monitoring.”
How to File a 23andMe Claim
There are actually two types of claims allowed as part of a 23andMe bankruptcy filing. Consumers affected by a data breach in 2023 can file a cybersecurity incident claim , which must be filed by July 14, 2025. To be eligible, you must have been a 23andMe customer between May 1, 2023 and October 1, 2023 and have received notification (by letter or email) that your information has been compromised as a result of a breach. You must also certify that you suffered damages (monetary or non-monetary) as a result of the incident.
Claims can be filed online through the Kroll Restructuring Administration Portal or by mailing a printed copy of the claim form to the address provided. To file a claim, you must provide some personal information, as well as details of the damages suffered, as well as supporting documentation, such as bank or credit card statements documenting your losses.
If you were not affected by the breach, but you have other complaints against 23andMe, you can submit a general complaint form using the same process and within the same deadline.