23andMe Lawsuit 2026: Payouts, Eligibility, Updates

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.

The 23andMe lawsuit is one of the biggest data breach cases heading into 2026, and millions of former users want to know if they’ll see any money. About 6.9 million people had their genetic and personal data exposed in a massive October 2023 breach, and the legal fallout is still unfolding.

What makes this case different from a typical data breach settlement is that 23andMe filed for Chapter 11 bankruptcy in March 2025. That filing changed the game for everyone waiting on a payout.

In this article, you’ll find everything that matters: how much you could receive, whether you qualify, key deadlines, how to protect your DNA data, and what the bankruptcy means for your claim. One fact that might surprise you: the stolen data included genetic ancestry details that can never be changed, unlike a credit card number.

On a related note, check out Reed-Nelson Lawsuit 2026: Settlement and Payout Guide

23andMe Lawsuit 2026: What You Need to Know Right Now

The 23andMe lawsuit in 2026 is a complex legal fight involving multiple class action claims, a bankruptcy proceeding, and state-level investigations all running at the same time. This is not one simple case with one simple outcome.

The original data breach happened in October 2023. Hackers used a technique called credential stuffing to break into about 14,000 accounts directly. From there, they scraped data from roughly 6.9 million users through the DNA Relatives feature.

The stolen information included names, birth years, ancestry results, and in some cases, health predisposition reports. That data showed up on Dark Web forums within weeks.

Multiple class action lawsuits were consolidated in the Northern District of California. Then, in March 2025, 23andMe filed for Chapter 11 bankruptcy in the Eastern District of Missouri. That filing put an automatic stay on many pending claims.

By 2026, the case sits at an intersection of bankruptcy law and consumer privacy law. The outcome depends on how the bankruptcy court handles creditor claims and whether a buyer for 23andMe’s assets, especially user data, gets approved.

Think of it like a car accident where the at-fault driver immediately declared bankruptcy. You still have a claim, but collecting on it just got a lot harder.

23andMe Lawsuit Payout: How Much Money Is on the Table

The 23andMe lawsuit payout remains uncertain, but estimates suggest individual payments could range from $100 to $10,000 depending on several factors, including the type of data exposed and your state of residence.

Here’s the reality: bankruptcy changes the math. When a company enters Chapter 11, lawsuit claimants become unsecured creditors. That means they get paid after secured creditors like banks and bondholders take their share.

23andMe’s assets include its genetic database, lab equipment, intellectual property, and whatever cash remains. Several potential buyers have expressed interest in acquiring the company. If a sale goes through, a portion of the proceeds could fund settlements.

The total settlement pool hasn’t been finalized. Early estimates from legal analysts put the range between $25 million and $200 million, depending on the sale price and how bankruptcy negotiations play out.

Your individual payout depends on:

• Whether your genetic health data was exposed (higher value)
• Whether you experienced identity theft or fraud as a result
• Which state you live in and its privacy laws
• Whether you can document out-of-pocket losses
• How many people file valid claims

Key Takeaway: The potential payout exists, but 23andMe’s bankruptcy means claimants are competing with other creditors for a limited pool of money.

23andMe Settlement Payout Per Person: Realistic Estimates

The 23andMe settlement payout per person will likely fall into tiers based on the severity of harm each claimant experienced. Not everyone will get the same amount.

Based on comparable data breach settlements, here’s what the payout structure might look like:

These numbers draw from settlements in cases like Equifax ($125 to $20,000 per person), T-Mobile ($25 to $100 base), and Anthem ($50 to $600). The 23andMe case involves genetic data, which courts have started treating as more sensitive than financial data.

If 6.9 million people are eligible but only 5% to 10% file claims (a typical rate), the per-person amount goes up significantly. In the Equifax case, only about 30% of eligible people filed.

State laws play a role too. Illinois residents may receive more because the Biometric Information Privacy Act (BIPA) allows damages of $1,000 to $5,000 per violation. California residents have protections under the CCPA that could boost their claims.

23andMe Class Action Lawsuit: How the Case Is Structured

The 23andMe class action lawsuit is a consolidated multidistrict litigation (MDL) in the Northern District of California, combining dozens of individual lawsuits into one coordinated proceeding.

Multiple law firms filed separate class actions in late 2023 and early 2024. The Judicial Panel on Multidistrict Litigation grouped them together for efficiency. This means one judge oversees pretrial matters for all cases.

The core legal claims include:

• Negligence: 23andMe failed to implement reasonable security measures
• Breach of contract: The company didn’t protect data as promised in its terms of service
• Violation of state consumer protection laws: Including California’s CCPA and Illinois’ BIPA
• Unjust enrichment: 23andMe profited from collecting data it failed to protect

The lead plaintiffs represent a proposed class of all U.S. residents whose data was compromised. Class certification, the formal step where a court agrees the case can proceed as a class action, has been complicated by the bankruptcy filing.

When 23andMe filed for Chapter 11, the automatic stay paused most litigation. The class action lawyers had to coordinate with the bankruptcy court to determine how claims would be handled. This dual-court structure slows things down considerably.

The case is essentially being fought on two fronts: the privacy claims in California and the creditor claims in Missouri.

Key Takeaway: The class action is real and active, but the bankruptcy filing created a second legal battleground that complicates and slows the path to any settlement.

23andMe Data Breach Lawsuit: What Actually Happened

The 23andMe data breach lawsuit stems from a cyberattack that began in April 2023 and wasn’t publicly disclosed until October of that year. Hackers stole sensitive genetic and personal data from nearly 7 million users.

The attackers didn’t exploit some exotic vulnerability. They used credential stuffing, a brute-force method where stolen username and password combinations from other breaches are tested against a target site. About 14,000 23andMe accounts were directly compromised this way.

Here’s where it got much worse. Those 14,000 compromised accounts had opted into the DNA Relatives feature. That feature shares data between users who are genetically related. Through it, hackers scraped information on an additional 6.9 million people who never had their passwords stolen.

The exposed data included:

• Full names and birth years
• Geographic locations
• Ancestry and ethnicity estimates
• Family tree connections
• Some health predisposition reports
• Profile photos

This data appeared for sale on hacking forums, with specific ethnic groups targeted. Hackers compiled lists of users with Ashkenazi Jewish and Chinese heritage, which raised serious concerns about discriminatory targeting.

23andMe initially downplayed the breach scope. The company later admitted the true scale was far larger than first reported. Critics pointed out that 23andMe did not require two-factor authentication at the time of the attack, a basic security measure most competitors already used.

23andMe Lawsuit Eligibility: Do You Qualify

You likely qualify for the 23andMe lawsuit if you had an active account before October 2023 and your data was part of the breach. The eligibility bar is relatively low for the basic claim tier.

There are two main groups of eligible claimants:

Group 1: Directly compromised users. These are the roughly 14,000 people whose accounts were broken into via credential stuffing. If you received a direct notification from 23andMe saying your account was accessed, you’re in this group. Your claims are strongest.

Group 2: DNA Relatives feature users. If you opted into the DNA Relatives feature and your information was scraped through another user’s compromised account, you’re eligible. This is the much larger group of about 6.9 million people.

To confirm your eligibility, check for:

• Any breach notification email from 23andMe (sent in late 2023 or early 2024)
• Whether you had an active account with the DNA Relatives feature enabled
• Your account creation date (must be before October 2023)
• Records of your 23andMe purchase or subscription

Even if you deleted your account after the breach, you may still qualify. The harm occurred before deletion. Your data was already exposed.

Key Takeaway: If you had a 23andMe account before October 2023 and used the DNA Relatives feature, you almost certainly qualify for the lawsuit.

How to Join the 23andMe Lawsuit

Joining the 23andMe lawsuit in 2026 involves filing a proof of claim through the bankruptcy court, and potentially registering with the class action, depending on how proceedings develop. The process has two tracks now.

Track 1: Bankruptcy Proof of Claim. Since 23andMe is in Chapter 11, affected users need to file a proof of claim with the bankruptcy court. This is a formal document stating that 23andMe owes you money because of the data breach. The bankruptcy court sets a deadline, called a “bar date,” by which all claims must be submitted.

Track 2: Class Action Registration. Some law firms handling the MDL in California are still accepting new class members. You can register with these firms to be included if the class action portion moves forward alongside or after the bankruptcy.

Steps to take right now:

• Gather your records. Find your 23andMe purchase confirmation, breach notification email, and any evidence of harm (credit monitoring charges, time spent on security measures, identity theft reports).
• File a proof of claim. Watch for the bankruptcy court’s bar date announcement. The proof of claim form will be available through the court’s claims agent.
• Register with a law firm. If you want individual representation or want to join the class, several firms are actively taking cases. You typically pay nothing upfront; attorneys work on contingency.
• Document everything. Keep records of any out-of-pocket expenses related to the breach.

You don’t have to hire a lawyer to file a proof of claim. But given the complexity of bankruptcy proceedings, having legal representation can improve your outcome.

23andMe Settlement: Where Things Stand in 2026

The 23andMe settlement has not been finalized as of early 2026. The case remains in active litigation, with bankruptcy proceedings running parallel to the class action claims.

In 2025, 23andMe entered Chapter 11 with the stated goal of selling its assets to pay creditors. Anne Wojcicki, the CEO and co-founder, initially proposed taking the company private. Regulators and privacy advocates pushed back hard, questioning whether a buyer should be allowed to acquire 15 million people’s genetic data.

The bankruptcy court appointed a committee of unsecured creditors, which includes representatives for data breach victims. This committee has a seat at the table during negotiations about asset sales and claim distributions.

This is also helpful — James Henry Lawsuit 2026: Full Settlement and Claim Guide

Several developments are shaping settlement talks:

• Potential buyers have submitted bids for 23andMe’s assets, including the genetic database
• State attorneys general from California, Illinois, and others have filed briefs demanding that user data protections be part of any sale
• The FTC has weighed in on data handling requirements
• The creditors’ committee is pushing for a dedicated fund for data breach victims

No dollar figure has been agreed upon yet. Settlement negotiations typically accelerate once a buyer is confirmed and the total sale price is known. Legal observers expect a concrete settlement framework to emerge in mid to late 2026.

The most likely outcome is a structured settlement where data breach claimants receive a percentage of the sale proceeds after priority creditors are paid. This is standard in bankruptcy-related class actions.

23andMe Lawsuit Update 2026: Latest Court Developments

The latest 23andMe lawsuit update in 2026 shows that the case is approaching critical decision points in both the bankruptcy and class action proceedings.

Here’s a timeline of the most recent developments:

The Northern District of California class action has been largely paused due to the bankruptcy stay. Judge Edward Chen has kept the MDL administratively open, meaning it can resume once the bankruptcy issues are resolved.

One significant development: several state attorneys general jointly petitioned the bankruptcy court to require that any buyer either delete user genetic data or obtain fresh consent from every user. This could affect the sale price, which in turn affects how much money is available for breach victims.

The FTC also indicated it is conducting its own investigation into 23andMe’s data security practices. Any FTC enforcement action could create additional pressure for a larger settlement fund.

Key Takeaway: The case is moving toward resolution in 2026, with asset sale hearings and settlement framework discussions expected by mid-year.

23andMe Bankruptcy Lawsuit: How Chapter 11 Changes Everything

The 23andMe bankruptcy filing fundamentally changed the legal playing field for everyone with a data breach claim. Chapter 11 doesn’t mean the company disappeared; it means the courts are now controlling how its money gets divided.

When a company files Chapter 11, an automatic stay goes into effect. This is a legal freeze that stops most lawsuits, collections, and enforcement actions against the company. For data breach victims, this meant the class action lawsuit couldn’t proceed to trial or settlement without the bankruptcy court’s blessing.

Here’s how the priority system works in bankruptcy:

Data breach victims sit at the fourth level. That’s the honest, uncomfortable truth. You get paid after banks, lawyers, and employees.

But it’s not all bad news. If 23andMe’s assets sell for a significant amount, and the genetic database is extremely valuable to pharmaceutical and research companies, there could be enough to cover higher-priority claims and still fund a meaningful settlement for breach victims.

Think of it like dividing a pie. The pie has to be big enough that even after the first three groups take their slices, something substantial remains for the fourth group. The sale price of 23andMe’s assets determines the size of that pie.

The creditors’ committee representing breach victims is actively fighting to maximize the amount allocated to data breach claims. Their leverage comes from the sheer number of affected people: 6.9 million claimants represent a massive voting block in bankruptcy proceedings.

23andMe Data Breach: What to Do Right Now

If you were affected by the 23andMe data breach, take these steps immediately to protect yourself and strengthen your potential claim. Don’t wait for the lawsuit to resolve before acting.

Step 1: Check if your data was exposed. Log into your 23andMe account (if it still exists) or search your email for any breach notification from the company. Notifications were sent in late 2023 and early 2024.

Step 2: Change your passwords everywhere. If you used the same password for 23andMe as for other sites, change all of them now. This is exactly how the hackers got in: reused passwords.

Step 3: Enable two-factor authentication. Turn on 2FA for every account that offers it. 23andMe eventually added mandatory 2FA, but you should have it everywhere.

Step 4: Freeze your credit. Contact all three credit bureaus (Equifax, Experian, TransUnion) and place a free credit freeze. This prevents anyone from opening new accounts in your name.

Step 5: Monitor for identity theft. Sign up for a free credit monitoring service. Many are available at no cost. Watch for unfamiliar accounts, inquiries, or address changes.

Step 6: Document your time and expenses. Every hour you spend dealing with this breach has value in a lawsuit. Keep a log of time spent, any money paid for credit monitoring or identity theft protection, and any emotional distress.

• Save all emails from 23andMe about the breach
• Screenshot any suspicious activity on your accounts
• Keep receipts for any security services you purchased
• Note the dates and times you spent on protective measures

This documentation becomes your evidence. The more detailed your records, the stronger your claim and the higher your potential payout.

23andMe Lawsuit: How Much Will I Get

How much you’ll get from the 23andMe lawsuit depends on your specific situation, but realistic estimates range from $50 to $10,000 per person based on harm level and available funds.

Let’s be honest: most people in large data breach class actions receive payments on the lower end. The Equifax breach affected 147 million people, and most claimants who filed a basic claim received between $125 and $500. The 23andMe case has fewer affected users (6.9 million), which could mean higher per-person payments.

What pushes your payout higher:

• Genetic health data exposure: If your health predisposition reports were leaked, courts treat this as more serious than basic demographic data
• Documented identity theft: If someone used your stolen data to commit fraud
• Financial losses: Any money you spent on credit monitoring, identity protection, or related services
• State law protections: Illinois BIPA claims can add $1,000 to $5,000 per violation; California CCPA claims add statutory damages
• Emotional distress: Documented anxiety, stress, or fear resulting from the breach

What keeps your payout lower:

• Filing a basic claim with no documented harm
• Living in a state without strong privacy laws
• The bankruptcy reduces available settlement funds

The bankruptcy wildcard is the biggest unknown. If 23andMe’s assets sell for $300 million and the settlement fund gets $50 million after priority creditors are paid, the math looks very different than if the fund only gets $10 million.

Key Takeaway: Your payout depends on documentation, state laws, and how the bankruptcy asset sale plays out; most people will receive between $100 and $1,000, while those with documented harm could see several thousand.

23andMe Class Action Payout Amount: Breaking Down the Numbers

The 23andMe class action payout amount will be determined by the total settlement fund divided among valid claimants, minus attorney fees and administrative costs. No final number exists yet, but we can do the math on several scenarios.

These numbers assume a 7% claim filing rate (about 500,000 of the 6.9 million eligible users). Historical data shows that most class actions see a 5% to 15% filing rate.

Attorney fees in class actions typically run 25% to 33% of the total fund. Administrative costs cover the claims process, notices, and distribution.

If fewer people file, each person gets more. In the Yahoo data breach settlement ($117.5 million), individual payouts ranged from $25 to $375 for basic claims. The Target breach settlement ($18.5 million) yielded about $10 to $10,000 per person.

The genetic data angle could push the 23andMe fund higher than typical breaches. DNA data can’t be reset like a password. That permanence gives judges reason to approve larger settlements.

Don't miss this — Education Lawsuit Last Week: 2026 Payout and Filing Guide

23andMe Lawsuit Deadline: Key Dates You Cannot Miss

The 23andMe lawsuit deadline for filing a proof of claim in the bankruptcy case is the single most important date for anyone seeking compensation. Missing it could mean losing your right to any payment.

Here are the critical dates:

The bar date is the one that matters most. If you don’t file your proof of claim by this date, you are permanently barred from receiving any distribution from the bankruptcy estate. No exceptions.

The bankruptcy court hasn’t set the final bar date as of early 2026. These dates are typically announced through court filings and mailed notices to known creditors. 23andMe should send notices to all registered users.

Do not rely on email notices alone. Check the bankruptcy court docket regularly or register with a law firm handling the case so you receive timely updates.

If you’re considering opting out of the class action to file your own individual lawsuit, understand that bankruptcy may limit this option. Individual claims still go through the bankruptcy process unless you can establish a basis for the claim to survive the stay.

Key Takeaway: Watch for the bankruptcy bar date announcement, expected in mid-2026, and file your proof of claim before it passes; missing it means getting nothing.

How to Delete Your 23andMe Data

Deleting your 23andMe data is possible but the process has gotten more complicated since the bankruptcy filing. You can request deletion through your account, but whether it actually happens depends on how the bankruptcy court handles data assets.

Before the bankruptcy, 23andMe allowed users to delete their accounts and request destruction of their DNA samples. The process took about 30 days and involved:

• Logging into your 23andMe account
• Going to Settings, then 23andMe Data
• Selecting “Permanently Delete Data”
• Confirming through email verification
• 23andMe then had 30 days to process the request

Here’s the problem. In bankruptcy, user data is considered a company asset. The bankruptcy court controls what happens to assets. If a buyer wants the genetic database, the court could approve the sale of that data, even if you’ve requested deletion.

This triggered a massive backlash. State attorneys general from California, Connecticut, and others petitioned the bankruptcy court to require user consent before any data transfer. The California Attorney General specifically cited the CCPA, which gives consumers the right to delete their personal information.

If you haven’t already requested deletion, do it now. Even if the outcome is uncertain, having a documented deletion request on file strengthens your position. It creates a record showing you did not consent to your data being transferred to a new owner.

Save a screenshot of your deletion request confirmation. Download any available data report from your account first, as you may need it for your claim.

Genetic data is unique. You can change a password or get a new credit card number. You cannot change your DNA. That permanence is why privacy advocates have been so aggressive about data deletion rights in this case.

23andMe Data Breach Compensation: All Your Options

23andMe data breach compensation can come from multiple sources, not just the class action settlement. Understanding all your options helps you maximize what you recover.

Option 1: Class Action / Bankruptcy Claim. This is the primary path. File a proof of claim in the bankruptcy and/or register with the class action. You’ll receive a payment from the settlement fund if one is established.

Option 2: Individual Lawsuit. If you suffered significant harm (major identity theft, financial losses, severe emotional distress), you may have grounds for an individual lawsuit. These claims can yield higher payouts but require more evidence and legal resources. The bankruptcy stay complicates individual suits.

Option 3: State Attorney General Actions. Several state AGs are pursuing their own enforcement actions against 23andMe. Settlements from these actions sometimes include direct payments to consumers. California and Illinois are the most active.

Option 4: FTC Enforcement. The FTC investigation could result in an order requiring 23andMe (or its buyer) to fund compensation for affected users. FTC orders have led to consumer payments in past data breach cases.

Option 5: Identity Theft Reimbursement. If someone used your breached data to commit fraud, you can seek reimbursement through your bank, credit card company, or identity theft insurance. These payments come separately from any lawsuit recovery.

You can pursue multiple options simultaneously. Receiving compensation from one source doesn’t necessarily bar you from others, though double recovery for the same specific loss is generally not allowed.

Key Takeaway: Don’t rely on just the class action; explore state AG actions, individual claims, and bank reimbursements to maximize your total compensation from the 23andMe data breach.

Frequently Asked Questions

How much will I get from the 23andMe lawsuit in 2026?

Most claimants can expect between $50 and $1,000 for basic claims.
If you documented identity theft or financial losses, payouts could reach $5,000 to $10,000.
Final amounts depend on the bankruptcy asset sale and total settlement fund size.

Is the 23andMe class action lawsuit still open for new claimants?

Yes, the case is still accepting new claimants as of early 2026.
You need to file a proof of claim in the bankruptcy proceeding before the bar date, which is expected in mid-2026.
Registering with a law firm handling the case ensures you receive deadline notifications.

How do I delete my DNA data from 23andMe?

Log into your account, go to Settings, and select “Permanently Delete Data.”
The bankruptcy complicates full deletion since user data is being treated as a company asset.
Submit your deletion request now and save the confirmation as evidence for your claim.

Does 23andMe’s bankruptcy mean I won’t get paid?

Bankruptcy does not eliminate your claim, but it does change the payment process.
Data breach victims are classified as unsecured creditors, meaning they get paid after banks and priority creditors.
If 23andMe’s assets sell for a strong price, meaningful compensation is still possible.

What is the deadline to file a claim in the 23andMe lawsuit?

The exact bar date has not been set as of early 2026, but it is expected to be announced by mid-2026.
Missing this deadline permanently bars you from receiving any payment from the bankruptcy estate.
Monitor the bankruptcy court docket or register with a law firm to get timely updates.

The 23andMe lawsuit is heading toward critical milestones in 2026. Your DNA data was exposed, and no amount of money fully fixes that. But holding the company accountable and recovering what you can still matters.

File your proof of claim as soon as the bar date is announced. Document every expense and hour you’ve spent dealing with this breach. Request deletion of your data today.

Stay informed on court developments. The next few months will determine how much money is available and who gets it.

Along the same lines: Finance Lawsuit April 2026: Settlement and Payout Updates

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.