If you were a 23andMe customer and your data was exposed in the 2023 breach, you can still join the class action lawsuit and file for compensation in 2026. The settlement fund sits at $30 million, and the process is more straightforward than most people think.
The catch is that deadlines matter. Missing a claim window means walking away with nothing, even if your genetic data was one of the nearly 7 million profiles compromised.
This article covers everything you need. You’ll learn who qualifies, how much you might receive, how to file your claim, and what the company’s bankruptcy means for your payout.
The answers are here. Let’s get into it.
23andMe Class Action Lawsuit: How to Join in 2026
Joining the 23andMe class action lawsuit in 2026 means submitting a verified claim through the court-approved settlement portal before the current deadline passes.
You do not need to hire an attorney. You do not need to prove you suffered identity theft. You only need to confirm you were a 23andMe customer during the breach period.
The lawsuit was filed in the Northern District of California following the October 2023 data breach. Plaintiffs alleged the company failed to protect sensitive genetic and personal information from a credential-stuffing attack that ran for months before being detected.
Class counsel negotiated a $30 million settlement fund. The court granted preliminary approval, which opened the door for customers to submit claims.
Quick Facts:
| Detail | Info |
|---|---|
| Lawsuit Type | Data breach class action |
| Court | U.S. District Court, Northern District of California |
| Settlement Fund | $30 million |
| Breach Date | October 2023 |
| Claimant Type | Current and former 23andMe customers |
| Status (2026) | Claims period open, deadline approaching |
The filing process takes under 15 minutes for most people. The hardest part is finding the right portal and knowing which category of claim applies to you.
Who Qualifies for the 23andMe Settlement?
You qualify for the 23andMe settlement if you were a registered 23andMe customer whose personal information was exposed in the October 2023 data breach.
The class covers U.S. residents only. International customers are not included under this settlement’s terms.
Eligibility breaks into two main categories. The first covers customers whose basic profile data was exposed through the company’s “DNA Relatives” matching feature. The second covers a smaller group whose Health + Ancestry data was specifically compromised, which carries higher compensation potential.
Eligibility Breakdown:
| Category | Who Is Included | Compensation Tier |
|---|---|---|
| Tier 1 | All affected customers, basic profile data | Standard payout |
| Tier 2 | Customers with Health + Ancestry data exposed | Enhanced payout |
| Tier 3 | Ashkenazi Jewish and Chinese-descent customers targeted specifically | Additional consideration |
| Excluded | International customers, unverified accounts | Not eligible |
You will need to confirm your registered email address used with 23andMe. The claims portal cross-references it against the breach records to verify eligibility automatically.
The company sent breach notification emails starting in December 2023. If you received one, you are almost certainly in the covered class.
How Much Will You Get From the 23andMe Lawsuit?
Most claimants can expect somewhere between $50 and $400, depending on what category of data was exposed and how many total claims are filed.
That range is not a guarantee. It is a realistic estimate based on the $30 million fund size and the expected claimant pool of several million people.
Think of it like splitting a pizza. The more people who show up, the smaller each slice. With potentially 6.9 million affected users, even a $30 million fund spreads thin fast.
The settlement does include provisions for higher payouts for customers who can document actual harm. That means out-of-pocket costs from identity theft, credit monitoring expenses, or time spent dealing with fraud.
Estimated Payout Scenarios:
| Claimant Pool Size | Standard Payout Estimate | After Fees and Admin Costs |
|---|---|---|
| 1 million claimants | ~$25 per person | ~$18 to $20 |
| 500,000 claimants | ~$50 per person | ~$38 to $42 |
| 200,000 claimants | ~$125 per person | ~$95 to $105 |
| Documented harm | Up to $10,000 per claim | Case-by-case review |
The attorneys handling the case take roughly 25 to 30 percent off the top. That is standard for class actions of this size.
Key Takeaway: The payout per person is modest for standard claimants, but customers who can document real financial harm may qualify for significantly higher individual awards.
23andMe Settlement Payout Per Person: What the Numbers Show
The per-person payout from the 23andMe settlement depends heavily on claim participation rates, which courts often cannot predict with precision.
Historical data from similar data breach settlements gives useful context. The Equifax data breach settlement had a $380 million fund but initial estimates of $125 per person shrank dramatically once 147 million people filed. Final payments to many were under $10.
23andMe’s breach affected a much smaller pool. The $30 million fund divided among an estimated 500,000 to 1 million actual claimants suggests payouts in the $30 to $100 range for standard claims after deductions.
Customers who experienced documented identity theft or misuse of their genetic data can submit for enhanced compensation. The settlement allows claims up to $10,000 for proven damages with supporting documentation.
Realistic Per-Person Estimates:
| Claim Type | Estimated Payout | Documentation Needed |
|---|---|---|
| Standard data exposure | $50 to $100 | Email confirmation of account |
| Sensitive data exposed | $100 to $250 | Health + Ancestry account proof |
| Proven out-of-pocket losses | $250 to $2,000 | Receipts, credit reports, records |
| Severe documented harm | Up to $10,000 | Full documentation package |
Do not count on the high end. File for the tier that honestly matches your situation.
23andMe Settlement Claim Deadline 2026: Do Not Miss This Date
The claim filing deadline for the 23andMe settlement in 2026 is a hard cutoff. Once it passes, the court will not accept late submissions under normal circumstances.
As of 2026, the settlement is in its active claims phase following court approval. The specific deadline date is posted on the official settlement administrator’s portal, and it is the only authoritative source for the current cutoff.
Most data breach settlements set claim windows of 90 to 180 days after preliminary approval. Given the timeline of court proceedings through 2024 and 2025, the 2026 deadline is either imminent or already passed depending on when you are reading this.
Deadline Action Checklist:
- Locate your 23andMe account email address
- Visit the court-approved claims portal (not a third-party site)
- Confirm you are in the covered class by entering your email
- Select the appropriate claim tier based on your data exposure
- Submit before the posted deadline date
Do not wait. Settlement deadlines do not get extended because a claimant forgot. Missing it is permanent.
Courts treat these deadlines seriously. There is no “I didn’t know” exception in most cases.
How to File Your 23andMe Claim Step by Step
Filing a 23andMe claim takes most people between 10 and 20 minutes if they have their account information ready.
The process runs through the official settlement administrator. You do not file through 23andMe’s website, and you do not go through any attorney’s office unless you are pursuing an individual claim for major damages.
Step-by-Step Filing Process:
| Step | Action | What You Need |
|---|---|---|
| 1 | Find the official settlement claims portal | Web search for “23andMe settlement claims administrator” |
| 2 | Enter your registered email address | The email you used to create your 23andMe account |
| 3 | Confirm your identity | Name, address, and possibly date of birth |
| 4 | Select your claim category | Standard or enhanced depending on data exposed |
| 5 | Submit documentation (if claiming enhanced tier) | Receipts, fraud reports, medical records if applicable |
| 6 | Record your confirmation number | Screenshot or print the confirmation page |
| 7 | Watch for settlement notifications | Emails from the administrator about payment timelines |
One thing people get wrong: they try to file through a class action aggregator site or law firm landing page. Those sites may be collecting lead information, not actually processing your claim.
Always verify the claims administrator is the court-appointed one. Case documents filed with the Northern District of California will list the administrator by name.
Key Takeaway: Filing your claim directly through the court-appointed settlement administrator is the only way to guarantee your submission counts toward the settlement.
What Happened in the 23andMe Data Breach?
The 23andMe data breach was a credential-stuffing attack that began in April 2023 and was not discovered until October 2023, nearly six months later.
Credential stuffing is when hackers take usernames and passwords stolen from other websites and try them on a new site. If someone used the same email and password for 23andMe as they did for a breached retailer or streaming service, hackers got in.
This is important for the lawsuit because plaintiffs argued 23andMe should have had stronger protections in place. The company had no mandatory multi-factor authentication at the time of the attack.
Once inside accounts, hackers accessed the “DNA Relatives” feature. That feature connects users with genetic relatives, and it inadvertently exposed data from people who had not even been directly hacked.
Breach Timeline:
| Date | Event |
|---|---|
| April 2023 | Credential-stuffing attack begins |
| October 2023 | 23andMe discovers and discloses breach |
| December 2023 | Company sends notification emails to affected users |
| January 2024 | First class action lawsuits filed |
| 2024 | Multiple suits consolidated in Northern District of California |
| March 2025 | 23andMe files for Chapter 11 bankruptcy |
| 2025 to 2026 | Settlement approval process and claims period |
The scale of the breach was massive. Approximately 6.9 million user profiles had data exposed through the DNA Relatives feature, even though only about 14,000 accounts were directly compromised by the credential stuffing itself.
23andMe Genetic Data Exposed: What Was Actually Leaked?
The data exposed in the 23andMe breach included far more than just names and email addresses.
Hackers accessed and later listed for sale on dark web forums data that included ethnicity estimates, health predispositions, relative match lists, display names, birth years, and geographic locations. For many users, this is some of the most sensitive personal data imaginable.
Genetic data is unique from other types of personal information. You can change a password. You can get a new credit card. You cannot change your DNA. The permanent nature of what was exposed is central to the legal argument for why damages should be significant.
What Was Exposed by Category:
| Data Type | Was It Exposed? | Sensitivity Level |
|---|---|---|
| Display name | Yes | Moderate |
| Profile photo | Yes | Moderate |
| Birth year | Yes | Low |
| Geographic location | Yes | Moderate |
| Ancestry percentages | Yes | High |
| Health predispositions | For some users | Very High |
| DNA Relatives matches | Yes | Very High |
| Raw genetic data file | No (in most cases) | Extreme |
The raw genetic data files themselves were not confirmed as part of the exposed dataset for the majority of affected users. That distinction matters for claim tiers.
Customers with Health + Ancestry subscriptions had more sensitive health data in their profiles and therefore fall into higher compensation categories.
Key Takeaway: Genetic and health data was at the core of this breach, making it legally and personally more serious than a standard credential theft case.
23andMe Bankruptcy and What It Means for Your Lawsuit
23andMe filed for Chapter 11 bankruptcy in March 2025, and this complicates the settlement picture in ways most news coverage has not fully explained.
Chapter 11 is reorganization bankruptcy, not liquidation. The company sought to sell its assets, including its massive genetic database of 15 million customer profiles, to pay off creditors. The question for lawsuit claimants is where they stand in the creditor line.
Settlement claimants in a class action generally become unsecured creditors in bankruptcy. That means they get paid after secured creditors like banks and bondholders. In many bankruptcy cases, unsecured creditors receive cents on the dollar.
The $30 million settlement fund is the key variable here. If the fund was established as a dedicated trust before the bankruptcy filing, it may be protected from the bankruptcy estate and distributed to claimants as planned.
Bankruptcy Impact on Your Claim:
| Scenario | What It Means for You |
|---|---|
| Settlement fund in protected trust | Payouts proceed as planned |
| Fund part of bankruptcy estate | Claimants compete with other creditors |
| Assets sold to new owner | New owner may assume settlement obligations |
| Bankruptcy dismissed or resolved | Normal settlement process resumes |
The new owner of 23andMe’s assets matters significantly. Any buyer taking on the genetic database likely negotiated terms around the existing legal liabilities.
Monitor the Delaware bankruptcy court docket. Case number 25-10321 covers the 23andMe proceedings and is public record.
23andMe Class Action Lawsuit Status Update 2026
As of 2026, the 23andMe class action is in its most critical phase: the intersection of bankruptcy proceedings and settlement claims administration.
The settlement received preliminary approval from the Northern District of California court in 2024. That cleared the way for the claims process to begin. But 23andMe’s bankruptcy filing in 2025 introduced a competing legal proceeding that affects how and when money flows to claimants.
Courts handling the class action and the bankruptcy court are operating on parallel tracks. The settlement administrator is working to ensure the $30 million fund remains available for claimants regardless of the bankruptcy outcome.
2026 Status Summary:
| Development | Status |
|---|---|
| Preliminary settlement approval | Granted (2024) |
| 23andMe bankruptcy filing | Filed March 2025, proceedings ongoing |
| Asset sale to new owner | Completed or in progress as of 2026 |
| Claims portal | Open during active claims period |
| Final settlement approval | Pending or recently granted |
| Payment distribution | Expected after final approval and claims period close |
The legal team representing the class has argued that the settlement fund should be treated separately from the bankruptcy estate. Courts have been receptive to this argument in similar cases.
Staying informed means checking the official case docket and the settlement administrator’s updates regularly.
Key Takeaway: The 23andMe bankruptcy adds complexity but does not automatically eliminate your right to a settlement payment. The $30 million fund’s legal status is the central issue to watch in 2026.
23andMe Settlement Amount: Total Breakdown of the $30 Million Fund
The total settlement is $30 million, but that number does not all go to claimants. Understanding where the money goes helps set realistic expectations.
Attorney fees in class actions typically run 25 to 30 percent of the total fund. For a $30 million settlement, that equals $7.5 to $9 million going to class counsel before a single claimant is paid.
Settlement administration costs cover the claims portal, the administrator’s staff, claims review, fraud detection, and payment processing. These costs typically run $2 to $5 million for a case of this size.
The remainder, roughly $16 to $20 million, gets distributed to verified claimants on a pro-rata basis based on the number of claims and their tier.
$30 Million Fund Breakdown:
| Category | Estimated Amount | Percentage |
|---|---|---|
| Class counsel attorney fees | $7.5 to $9 million | 25 to 30% |
| Settlement administration | $2 to $4 million | 7 to 13% |
| Named plaintiff incentive awards | $5,000 to $25,000 each | Minimal |
| Net claimant fund | $16 to $20 million | ~57 to 65% |
Named plaintiffs, the individuals who originally filed the lawsuit on behalf of the class, receive small incentive awards. These are typically in the $5,000 to $25,000 range and come out of the total fund.
The net claimant fund divided by the number of valid claims determines your individual payment. That math is straightforward once you know how many people filed.
How the 23andMe Settlement Claims Portal Works
The 23andMe settlement claims portal is a secure online form managed by the court-appointed settlement administrator, not by 23andMe itself.
The portal verifies your identity against the list of known breach victims. When you enter your email address, the system checks it against 23andMe’s breach records to confirm you are a class member.
If your email matches, you proceed to the claim form. You select which tier of claim applies to your situation, enter your mailing or payment information, and submit.
Claims Portal Process:
| Stage | What Happens | Time Required |
|---|---|---|
| Email verification | System checks your email against breach list | Instant |
| Identity confirmation | Name and address entered and verified | 2 to 3 minutes |
| Claim tier selection | Choose standard or enhanced category | 2 to 5 minutes |
| Documentation upload | Only for enhanced or documented harm claims | 5 to 15 minutes |
| Submission | Claim submitted, confirmation number issued | Instant |
| Review period | Administrator reviews claims for validity | 30 to 90 days |
| Payment | Issued by check or digital payment | After final approval |
Scam sites mimic legitimate claims portals. The real portal is listed in official court documents and press releases from the settlement administrator.
If a site asks for your Social Security number, payment of any fee, or credit card information, leave immediately. Legitimate class action claims portals never charge claimants.
Are You Automatically Included in the 23andMe Class Action?
You are automatically part of the settlement class if you were a 23andMe customer whose data was exposed, but you are not automatically paid. You must actively file a claim.
This is the most common misconception about class actions. Being in the “class” means you are covered by the settlement’s terms, but money does not come to you automatically. You have to ask for it.
There is one exception to the “file a claim” rule. If the settlement includes automatic relief like credit monitoring services, you may receive that without filing. But cash compensation always requires a submitted claim.
Active vs. Automatic Benefits:
| Benefit Type | Do You Need to File? | Notes |
|---|---|---|
| Cash payment | Yes, always | Must submit claim before deadline |
| Credit monitoring services | Sometimes auto-enrolled | Check settlement terms |
| Identity protection services | Sometimes auto-enrolled | Check settlement terms |
| Right to sue individually | Requires opt-out | Must opt out before deadline to preserve |
Opting out is the alternative path. If you want to sue 23andMe individually rather than participate in the class settlement, you must formally opt out before the opt-out deadline.
Opting out makes sense only if you have extraordinary documented damages that far exceed what the class settlement offers.
Key Takeaway: Being in the class does not get you paid. Filing your claim before the deadline is the only action that results in a settlement check.
23andMe Data Breach: Which States Were Most Affected?
The 23andMe breach affected customers across all U.S. states, but California residents have the strongest legal protections given the state’s data privacy laws.
California’s Consumer Privacy Rights Act (CPRA) and the state’s genetic privacy statutes give California residents additional legal standing. The lawsuit was filed in California specifically because 23andMe is headquartered there and because California law provides the strongest consumer protections for this type of breach.
Several other states with strong data privacy laws also gave claimants in those states additional grounds for damages.
State-Level Factors:
| State | Relevant Privacy Law | Impact on Claim |
|---|---|---|
| California | CPRA, Genetic Privacy Law | Strongest protections, class filed here |
| Illinois | Biometric Information Privacy Act | Potential additional state claims |
| New York | SHIELD Act | Additional state-level protections |
| Washington | My Health MY Data Act (2023) | Genetic data specific protections |
| Texas | Biometric Privacy Law | Additional state-level rights |
| All other states | Federal laws only | Standard class member rights |
California claimants are not guaranteed higher payouts from this particular settlement. The federal class action treats all U.S. class members under the same framework.
However, some law firms have pursued state-specific actions alongside the federal class action that may provide additional compensation avenues for customers in states with strong privacy laws.
What to Do If You Missed the 23andMe Claim Deadline
Missing the 23andMe claim deadline is serious, but it is not always the end of the road.
Courts do occasionally allow late claim filings in class actions under specific circumstances. These include situations where the claimant never received proper notice, experienced a documented emergency, or can show the claims administrator made an error in the notification process.
Filing a late claim requires a written motion to the court explaining why the deadline was missed and why the late claim should be accepted. Most people will need an attorney’s help for this.
Options If You Missed the Deadline:
| Option | Likelihood of Success | What It Requires |
|---|---|---|
| Late claim petition to court | Low to moderate | Written motion, legal justification |
| Proof of no notice received | Moderate | Evidence you never got breach notification |
| Individual lawsuit filing | Possible if not barred by settlement | Must not have been part of settled class |
| State-level action | Depends on state law | Separate from federal class action |
| Contact settlement administrator | Always worth trying | Explain your situation in writing |
There is no guarantee any of these work. But doing nothing definitely does not work.
Act quickly. The longer you wait after a missed deadline, the weaker your argument for an exception becomes.
23andMe Lawsuit vs. Individual Lawsuit: Which Path Is Better for You?
The class action settlement is the right choice for most people. An individual lawsuit makes sense only for customers with extraordinary, documented damages.
Class action participation is simple, low-effort, and guaranteed to produce at least some recovery if your claim is valid. You submit a form, wait, and receive a payment. There are no legal fees out of your pocket. There is no courtroom involvement.
An individual lawsuit gives you the ability to seek the full value of your damages without sharing a pool. But it requires an attorney, takes years, costs money upfront or through contingency arrangements, and is never guaranteed to succeed.
Think of it like this. The class action is a coupon that everyone with a receipt can redeem. The individual lawsuit is taking the store to arbitration because that coupon does not cover the full cost of what you lost.
Comparison Table:
| Factor | Class Action | Individual Lawsuit |
|---|---|---|
| Effort required | Low (online form) | High (legal proceedings) |
| Timeline | 1 to 2 years | 3 to 7 years |
| Cost to you | Free | Attorney fees or contingency |
| Payout potential | $50 to $400 average | Potentially unlimited |
| Success guarantee | High (if eligible) | Never guaranteed |
| Best for | Most affected customers | High-damage individual cases |
| How to start | File claim online | Hire an attorney, opt out of class |
If you experienced serious documented harm, including medical discrimination, job loss tied to genetic data exposure, or significant identity theft losses, speak with an attorney about whether opting out and pursuing your own case makes financial sense.
For the vast majority of 23andMe customers, filing the class action claim is the smart, straightforward path.
Key Takeaway: Most customers are better off filing the class action claim. Individual lawsuits are only worth considering when documented damages far exceed what the settlement’s enhanced tier offers.
Frequently Asked Questions
How do I join the 23andMe class action lawsuit in 2026?
You join the 23andMe class action lawsuit by filing a claim through the official settlement claims portal before the posted deadline.
You need only your registered 23andMe email address to start the process.
The filing takes most people under 20 minutes, and no attorney is required.
How much money will I get from the 23andMe settlement?
Most standard claimants can expect between $50 and $400, depending on the number of total valid claims filed.
Customers who can document actual financial harm from the breach may qualify for up to $10,000 in enhanced compensation.
The exact payment amount is calculated after the claims period closes and all valid submissions are reviewed.
Does the 23andMe bankruptcy affect my settlement payout?
The bankruptcy filing in March 2025 does affect the timeline and could affect the amount, but the $30 million settlement fund may be protected depending on its legal structure.
If the fund was established as a dedicated trust before bankruptcy, it should be distributed to claimants as originally planned.
Monitoring updates from the settlement administrator and the Delaware bankruptcy court is the best way to stay informed.
What genetic information was exposed in the 23andMe data breach?
The breach exposed ancestry percentages, ethnicity estimates, DNA Relatives match lists, health predisposition data (for some users), birth years, and geographic location data.
Raw genetic data files were not confirmed as exposed for the majority of affected users.
Health + Ancestry subscribers had the most sensitive data at risk and fall into higher compensation tiers.
What is the deadline to file a 23andMe settlement claim in 2026?
The exact deadline is posted on the official settlement administrator’s portal, and it changes as the case progresses through final court approval.
Do not rely on news articles or third-party sites for the deadline date. Check the administrator’s portal directly.
Missing the deadline permanently forfeits your right to a payment from this settlement.
The Bottom Line
The 23andMe class action gives millions of affected customers a real path to compensation. The process is simple enough for anyone to handle without an attorney. The deadline is not.
Check the official claims portal now. Confirm your email address is in the breach records. File your claim in the correct tier.
If you experienced real financial harm from this breach, gather your documentation and submit for the enhanced tier. It is the same form with more supporting evidence.
Your genetic data cannot be unbreached. But your right to compensation can still be claimed
