23andMe Data Breach: $47M Settlement Approved for 7M Victims

A Missouri bankruptcy court administrator has greenlit a $46.8 million settlement fund compensating millions of victims of the 2023 23andMe data breach. The deal, confirmed on Wednesday, allocates $32.5 million to affected consumers, with the remaining $14.3 million directed to Kroll, the settlement and claims administrator. Originally, plaintiffs had sought a staggering $48 billion in damages, but the administrator opted for the lower figure, citing 23andMe's "dire financial condition" and the district court's prior approval of a $30 million prepetition settlement as reasonable benchmarks.

The breach, which began in April 2023, compromised data belonging to roughly 7 million 23andMe customers. Attackers accessed DNA Relatives profiles for approximately 5.5 million consumers and exposed records for another 14.1 million users of the company's Family Tree feature, with much of the stolen data subsequently appearing on dark web marketplaces. Class members who filed claims—nearly 256,000 in total—will receive compensation scaled to the severity of the harm they suffered, with awards ranging from $50 for minor incidents to $10,000 for the most serious cases. Readers concerned about exposure in similar incidents can verify their status using a email breach checker to determine whether their credentials have surfaced in known leaks.

The settlement comes against the backdrop of 23andMe's collapse: the genetics testing firm, already struggling financially before the breach, filed for Chapter 11 bankruptcy in March 2025 and liquidated most of its assets before rebranding as Chrome Holding Co. Founder Anne Wojcicki repurchased the company amid significant controversy. The plan administrator justified the reduced settlement by warning that pursuing the full $48 billion "would expose the estates to protracted, high-stakes litigation lasting months, if not years," draining resources better preserved for stakeholders. As data breach litigation of this scale becomes increasingly common, affected individuals are encouraged to conduct a comprehensive privacy checkup and strengthen their defenses—including running a password checker—to mitigate risks from future exposures.