Key Takeaways
- California attorney general Rob Bonta announced a $6m settlement for the 2023 data breach.
- The breach affected over 855,000 Californians and exposed genetic and personal information.
- The settlement resolves legal claims related to the sale of 23andMe assets during bankruptcy.
California has secured a $6 million settlement from 23andMe in relation to a significant data breach that occurred in 2023. The breach exposed the genetic and personal information of over 855,000 Californians, raising concerns about privacy and data security.
According to California Attorney General Rob Bonta, the settlement is a crucial step in addressing the legal claims related to the sale of 23andMe’s assets to TTAM Research Institute, a nonprofit organization controlled by 23andMe co-founder Anne Wojcicki.
In an attempt to block the $305 million sale, California had argued that the bankruptcy sale violated the state’s Genetic Information Privacy Act. The state maintained that consumers had not given express consent for the sale of their personal data.
The settlement marks a resolution to the legal disputes surrounding the data breach and the subsequent sale of 23andMe’s assets. It is a significant outcome for California residents who were affected by the breach, as it provides financial compensation for the loss of their personal and genetic information.
The incident highlights the importance of stringent data protection measures and the need for companies to obtain explicit consent from their customers before selling their data. The settlement serves as a warning to other companies about the potential legal consequences of mishandling sensitive information.
While the settlement is a positive development, it does not fully address the broader issues surrounding data privacy and the sale of personal information. The incident has sparked discussions about the need for stronger regulatory frameworks to protect consumer data in the digital age.
The resolution of the legal claims related to the 23andMe data breach is a significant milestone for California and sets a precedent for future data protection cases. It underscores the commitment of state authorities to safeguard the privacy and rights of their residents.
The settlement is part of a larger effort to ensure that companies adhere to strict data protection standards and to hold them accountable for any breaches that occur. It is hoped that this outcome will encourage other companies to prioritize data security and transparency in their operations.





