23 and Me Lawsuit 2026: Payouts, Eligibility, Claims

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.

As of July 18, 2026, the 23andMe data breach lawsuit has moved into the payout phase. On July 7, 2026, a U.S. bankruptcy judge approved a $46.75 million settlement covering the 2023 data breach, applying to claims submitted before the February 17, 2026 deadline. Since $14.29 million had already been distributed, the ruling releases an additional $32.46 million to claimants. Separately, on July 14, 2026, a coalition of more than 40 state attorneys general announced an $18 million multistate settlement with 23andMe’s bankruptcy estate, part of $150 million in allowed claims for state governments. California’s Attorney General is still pursuing a separate civil enforcement suit against Chrome Holding Co. over the breach.

Last updated: July 2026

The 23 and me lawsuit stems from a massive data breach that exposed genetic information belonging to nearly 7 million customers. If you used 23andMe before October 2023, your DNA data may have been stolen and sold on the dark web.

Don't miss this — Live Olympics Lawsuit 2026: Settlement and Filing Update

That’s not something you can change like a password.

Multiple class action lawsuits are now working through federal court in California. But here’s the twist: 23andMe filed for Chapter 11 bankruptcy in March 2026. That complicates everything from payouts to claim deadlines.

In this guide, you’ll learn who qualifies for the lawsuit, how much compensation you might receive, and exactly what steps to take. We’ll also break down how bankruptcy affects your ability to collect.

One key number to know: hackers accessed data from 6.9 million accounts. Only 14,000 accounts were directly breached. The rest were exposed through the DNA Relatives feature.

23 and Me Lawsuit

The 23 and me lawsuit refers to multiple legal actions filed against the genetic testing company following its October 2023 data breach disclosure. Plaintiffs allege 23andMe failed to protect sensitive genetic and personal information from hackers who used a technique called credential stuffing.

The breach didn’t just expose email addresses. It exposed DNA profiles, ancestry information, health predispositions, and family connections.

That makes this lawsuit different from typical data breaches.

The stolen data appeared for sale on dark web forums within days of the breach becoming public. Some listings specifically targeted users with Ashkenazi Jewish or Chinese ancestry.

23andMe initially tried to blame customers for reusing passwords. That defense didn’t hold up well in early court proceedings.

The company’s DNA Relatives feature allowed hackers to access millions of profiles by breaching just thousands of accounts. That design flaw sits at the heart of most legal claims.

23 and Me Lawsuit Payout

The 23 and me lawsuit payout will likely range from $100 to $10,000 per claimant, depending on the type of data exposed and whether you can prove actual harm. Genetic data breaches typically yield higher settlements than standard data breaches because DNA cannot be changed or secured after exposure.

Think of it this way: you can get a new credit card after a breach. You can’t get new DNA.

No final settlement has been approved yet. But here’s what similar cases suggest.

The 2019 Equifax settlement paid most claimants around $125 for a breach that didn’t include genetic info. The 23andMe case involves far more sensitive data.

Attorneys expect individual payouts to land higher than the Equifax average. The challenge is the company’s bankruptcy filing. That could shrink the total settlement pool.

Key Takeaway: Genetic data is irreplaceable, and courts recognize that. Expect higher payouts than typical data breach cases, but bankruptcy complicates the math.

23andMe Settlement

The 23andMe settlement has not been finalized as of May 2026. Negotiations are ongoing, but the company’s Chapter 11 bankruptcy filing in March 2026 threw a wrench into the process.

Here’s what we know about settlement discussions so far.

Before bankruptcy, 23andMe was negotiating a class action settlement that reportedly valued total claims in the range of $30 million to $50 million. That would have covered legal fees, administrative costs, and individual payouts.

After bankruptcy, those numbers are in flux.

Bankruptcy means 23andMe’s creditors will fight over limited assets. Lawsuit claimants become unsecured creditors in most cases. That puts you behind banks and bondholders in line.

The good news: genetic data breach victims may receive special consideration. Courts have recognized that privacy violations involving biometric or genetic data cause unique harm.

Some state attorneys general are also pursuing separate enforcement actions. Those could result in additional penalties paid to affected residents.

Who Qualifies for 23andMe Lawsuit

You qualify for the 23andMe lawsuit if you had an active account with the company between April 2023 and September 2023. This window covers the period when hackers actively accessed customer data before the company detected the breach.

You don’t need proof that your specific data was stolen. Exposure through the DNA Relatives feature counts.

You likely qualify if:

• You created a 23andMe account before October 2023
• You opted into the DNA Relatives feature
• You received a breach notification email from 23andMe
• Your genetic or health data was stored on their servers

You may not qualify if:

• You created your account after October 2023
• You never activated your DNA kit
• You deleted your account and data before April 2023

The class action covers all affected users automatically unless you opt out. But you can also pursue an individual lawsuit if you suffered significant damages beyond what the class action covers.

Individual lawsuits make sense if you experienced identity theft, discrimination, or severe emotional distress directly tied to the breach.

Key Takeaway: If you had a 23andMe account before October 2023, you almost certainly qualify. The DNA Relatives feature expanded exposure far beyond the 14,000 directly hacked accounts.

23andMe Class Action Lawsuit

The 23andMe class action lawsuit consolidates thousands of individual claims into one case. This approach gives consumers collective bargaining power against a company that might otherwise outspend them in court.

The lead case is proceeding in the U.S. District Court for the Northern District of California.

Multiple law firms are working together as co-lead counsel. They filed a consolidated complaint in early 2024 that combined claims from dozens of earlier individual lawsuits.

Class actions have pros and cons.

Advantages:

• No upfront legal costs for you
• Attorneys handle all paperwork
• Automatic inclusion unless you opt out
• Strength in numbers during negotiations

Disadvantages:

• Individual payouts are typically smaller
• You give up the right to sue separately
• Process can take years
• Bankruptcy complicates distribution

If you want to stay in the class action, you don’t need to do anything right now. You’ll receive notice when a settlement is proposed.

If you want to pursue your own lawsuit, you must formally opt out of the class action once the court sets a deadline.

23andMe Data Breach Lawsuit

The 23andMe data breach lawsuit alleges the company failed to implement basic security measures that would have prevented hackers from accessing customer data. The core accusation: 23andMe knew credential stuffing attacks were common but didn’t require two-factor authentication.

This wasn’t a sophisticated hack. It was preventable.

Hackers used username and password combinations leaked from other breaches. They tried those combinations on 23andMe accounts. When they worked, they got in.

The DNA Relatives feature turned a small breach into a massive one. One compromised account could expose family connections for dozens of other users.

Plaintiffs argue 23andMe should have:

• Required two-factor authentication
• Implemented rate limiting on login attempts
• Detected unusual access patterns sooner
• Secured the DNA Relatives feature differently

23andMe changed its terms of service after the breach. The new terms include forced arbitration and class action waivers. Those changes don’t apply to claims arising from the 2023 breach.

Key Takeaway: The lawsuit centers on preventable failures. 23andMe allegedly prioritized convenience over security and left the door open for hackers using basic techniques.

How to File 23andMe Lawsuit Claim

To file a 23andMe lawsuit claim, you can either join the existing class action automatically or work with an attorney to file an individual case. Most affected customers will follow the class action path because it requires no upfront costs.

Here’s the step-by-step process.

For Class Action Participation:

1. Confirm eligibility by checking if you had an account during the breach period
2. Wait for court notice announcing settlement approval
3. Submit claim form when the claims administrator opens the process
4. Provide proof of account ownership (email confirmation, purchase receipt, etc.)
5. Receive payment after final settlement distribution

For Individual Lawsuit:

1. Consult an attorney specializing in data breach or privacy law
2. Document your damages including any identity theft or emotional distress
3. File complaint in appropriate state or federal court
4. Opt out of class action once the deadline is announced
5. Proceed through litigation or negotiate individual settlement

The claims submission website is not yet active. The court must first approve a settlement. Watch for notifications from the court or claims administrator.

You can sign up with law firms handling the case to receive updates. This doesn’t cost anything and doesn’t obligate you to do anything.

23andMe Lawsuit Eligibility

23andMe lawsuit eligibility extends to anyone whose personal or genetic data was stored on company servers during the breach period. You don’t need to prove hackers accessed your specific account. Being part of the exposed database is enough.

The class definition is broad by design.

Definitely Eligible:

• Customers who received breach notification emails
• Users who had DNA Relatives feature enabled
• Anyone with profile information viewable by other users
• Customers whose genetic health reports were generated

Possibly Eligible:

• Users who deactivated accounts but didn’t delete data
• Family members added by primary account holders
• Customers in any U.S. state

Not Eligible:

• Customers who joined after October 2023
• Users who never returned DNA kits
• Non-U.S. customers (separate legal actions may apply)

Even if you didn’t opt into DNA Relatives, your basic profile information may have been accessible. The breach affected multiple data categories.

If you’re unsure about eligibility, check your email for messages from 23andMe about the breach. The company sent notifications to affected users in late 2023.

See also: James Henry Lawsuit 2026: Full Settlement and Claim Guide

Key Takeaway: Eligibility is broad. If you were a 23andMe customer before October 2023, assume you qualify until told otherwise.

23andMe Compensation Amount

The 23andMe compensation amount will depend on what data was exposed and whether you experienced actual harm. Estimated payouts range from $100 for basic exposure to $10,000 or more for documented damages.

Here’s how compensation tiers typically work in data breach settlements.

These estimates assume a settlement happens before bankruptcy depletes company assets. That’s not guaranteed.

Genetic data carries higher value than standard personal information. Courts have recognized that DNA cannot be changed, making exposure permanent. This creates ongoing risk of discrimination by insurers, employers, or others.

Factors that increase compensation:

• Health predisposition reports accessed
• Evidence of data appearing on dark web
• Documented identity theft or fraud attempts
• Time spent addressing breach consequences
• Out-of-pocket costs for credit monitoring

Factors that decrease compensation:

• Large class size diluting settlement pool
• Bankruptcy reducing available funds
• Minimal personal data in your profile
• No documented actual damages

Class action settlements typically pay more to claimants who submit detailed documentation. Keep records of any breach-related problems.

23andMe Lawsuit Deadline

The 23andMe lawsuit deadline depends on your legal path. For the class action, you’ll have a specific claim submission deadline after settlement approval. For individual lawsuits, statutes of limitations vary by state.

No final deadlines have been set yet. But the clock is ticking.

Most states give you two to four years from when you discovered the breach to file a lawsuit. The October 2023 disclosure starts that clock.

Key dates to watch:

• October 2023: Breach publicly disclosed
• November 2023: First lawsuits filed
• March 2026: Bankruptcy filed
• Mid-2026: Expected bankruptcy bar date for claims
• Late 2026 or 2026: Possible settlement approval

If you want to file an individual lawsuit, don’t wait until the last minute. Gathering evidence and building a case takes time.

For the class action, you’ll receive mailed or emailed notice when deadlines are set. Make sure 23andMe has your current contact information.

Key Takeaway: No hard deadlines exist yet, but don’t assume you have unlimited time. Bankruptcy proceedings could accelerate some timelines.

23andMe Lawsuit 2026 Update

The 23andMe lawsuit 2026 update centers on the company’s Chapter 11 bankruptcy filing and its impact on pending litigation. 23andMe announced bankruptcy in March 2026, citing mounting legal costs and declining revenues.

This changes the game for affected customers.

What happened in 2026:

• March 2026: 23andMe files Chapter 11 bankruptcy
• CEO Anne Wojcicki stepped down from daily operations
• Company exploring sale of assets including genetic database
• State attorneys general investigating data handling practices
• Court consolidated multiple lawsuits for efficiency

The bankruptcy automatic stay temporarily halts most lawsuits. This gives the company breathing room to reorganize. But it doesn’t eliminate claims entirely.

Genetic data privacy advocates are pushing for special treatment of breach victims in bankruptcy proceedings. They argue DNA exposure causes irreversible harm that should take priority over some creditors.

A potential buyer of 23andMe’s assets might assume liability for the data breach. That could actually improve settlement prospects if the buyer has deeper pockets.

Customers should continue documenting any breach-related problems. The legal process is delayed, not dead.

23andMe Bankruptcy and Lawsuit

The 23andMe bankruptcy directly affects the lawsuit by limiting available funds and pausing legal proceedings. When a company files Chapter 11, an automatic stay halts most lawsuits against it while the bankruptcy court takes control.

This doesn’t mean you lose your claim. But it does change how you’ll get paid.

How bankruptcy affects your lawsuit:

• Lawsuits are paused during bankruptcy proceedings
• Claims become part of the bankruptcy estate
• You may need to file a proof of claim with the bankruptcy court
• Payouts depend on asset sales and creditor priority
• Settlement negotiations may continue in bankruptcy

Here’s the brutal truth: bankruptcy often means pennies on the dollar for unsecured creditors. Lawsuit claimants typically fall into that category.

But genetic data breach victims might receive better treatment. Courts increasingly recognize that biometric and genetic privacy violations cause unique, irreparable harm.

The bankruptcy court could approve a settlement as part of the reorganization plan. This might actually speed up payments compared to years of traditional litigation.

Key Takeaway: Bankruptcy complicates payouts but doesn’t eliminate them. File required bankruptcy claims when deadlines are announced to preserve your rights.

23andMe Genetic Data Breach

The 23andMe genetic data breach exposed DNA profiles, ancestry percentages, health predispositions, and family connections for nearly 7 million customers. Unlike typical data breaches involving credit cards or passwords, genetic information cannot be changed or secured after exposure.

Your DNA is permanent. So is this breach.

What data was exposed:

• Full names and email addresses
• Birth dates and geographic locations
• Ancestry composition percentages
• Genetic health risk reports
• Family tree connections through DNA Relatives
• Shared DNA percentages with matched relatives

Hackers specifically targeted users of certain ethnic backgrounds. Some dark web listings advertised Ashkenazi Jewish ancestry data at premium prices.

This raises concerns beyond identity theft. Exposed genetic data could be used for:

• Discrimination by employers or insurers
• Targeted scams based on health conditions
• Harassment based on ethnic heritage
• Fraudulent family connection claims
• Future uses we can’t yet predict

The permanence of genetic data exposure sets this case apart. A credit card breach is annoying. A DNA breach is forever.

23andMe Lawsuit Status

The 23andMe lawsuit status as of May 2026 is “active but stayed” due to bankruptcy proceedings. The federal class action in California continues working through procedural issues while the bankruptcy court handles asset distribution questions.

Multiple legal tracks are running simultaneously.

Worth reading: AT&T Lawsuit 2026: Settlement Amounts & Claim Deadlines

Recent procedural developments:

• Class certification motion was pending when bankruptcy hit
• Discovery had begun before the stay
• Settlement discussions were reportedly progressing
• Judge had consolidated multiple related cases

The bankruptcy filing threw a wrench into what seemed like a straightforward path to settlement. Now attorneys are navigating two court systems simultaneously.

Some law firms are shifting strategy. Instead of waiting for class action settlement, they’re preparing to file proofs of claim in bankruptcy court.

The bankruptcy case is assigned to a judge in Delaware. The class action remains in California. Coordination between courts will determine how quickly victims get paid.

Key Takeaway: The lawsuit is not dead, just complicated. Multiple legal paths exist, and skilled attorneys are working all of them.

You may want to read Education Lawsuit Last Week: 2026 Payout and Filing Guide

23andMe Breach Notification

The 23andMe breach notification went out to affected customers via email in October 2023. The company disclosed that hackers had accessed accounts using credentials stolen from other websites.

If you received this email, you’re almost certainly eligible for the lawsuit.

What the notification included:

• Confirmation your account was potentially affected
• Description of data that may have been accessed
• Offer of free credit monitoring services
• Steps to reset your password
• Contact information for questions

Many customers missed the email. It may have landed in spam folders or been ignored as routine marketing.

Check your email archives for messages from 23andMe with subject lines about “security” or “account notice.” These serve as evidence of your eligibility.

If you didn’t receive a notification but believe you were affected, you can:

• Log into your 23andMe account and check security settings
• Contact 23andMe customer service directly
• Check if your email appears in breach databases like HaveIBeenPwned
• Consult with an attorney handling the case

The notification itself proves 23andMe acknowledged your data was at risk. Save it.

Key Takeaway: Your breach notification email is important documentation. Find it, save it, and keep it accessible for the claims process.

23andMe Lawsuit Proof Required

The 23andMe lawsuit proof required varies depending on your claim type. Basic class action participation needs minimal documentation. Claims for additional damages need more evidence.

Here’s what you might need to provide.

For basic class action claim:

• Proof you had a 23andMe account (order confirmation, email, receipt)
• Breach notification email if you received one
• Current contact information for payment

For enhanced compensation claims:

• Credit monitoring bills or identity theft costs
• Documentation of fraud or unauthorized accounts
• Records of time spent addressing breach issues
• Evidence of emotional distress (medical records, therapy receipts)
• Screenshots of your data appearing on dark web

Most class members won’t need extensive documentation. The default payout requires only basic account verification.

But if you want maximum compensation, start collecting evidence now. Document everything related to the breach, including:

• Any suspicious activity on financial accounts
• Phishing attempts mentioning your genetic data
• Time spent on calls with banks or credit agencies
• Stress or anxiety related to the exposure

Courts reward claimants who can demonstrate specific, documented harm. General concerns aren’t enough for enhanced payouts.

Frequently Asked Questions

How much money will I get from the 23andMe lawsuit?

Most claimants will receive between $100 and $500 from the class action settlement.

If you can prove specific damages like identity theft or emotional distress, payouts could reach $5,000 or more.

Final amounts depend on the settlement size and how bankruptcy affects available funds.

Am I eligible for the 23andMe class action if I deleted my account?

You may still be eligible if your account was active during the April to September 2023 breach period.

Deleting your account after the breach doesn’t remove your eligibility.

However, if you deleted your account and data before April 2023, you likely don’t qualify.

Does 23andMe bankruptcy mean I won’t get paid?

Bankruptcy does not eliminate your claim, but it could reduce how much you receive.

Lawsuit claimants become unsecured creditors who get paid after banks and secured lenders.

A company sale could actually improve payouts if the buyer assumes liability.

What is the deadline to file a 23andMe lawsuit claim?

No final claim deadline has been set yet because the settlement isn’t approved.

Individual lawsuits must be filed within two to four years of the October 2023 breach disclosure, depending on your state.

Watch for bankruptcy court bar dates requiring claim filings by mid-2026.

Do I need a lawyer to join the 23andMe lawsuit?

You do not need your own lawyer to participate in the class action.

Class counsel handles everything and gets paid from the settlement, not your pocket.

You only need a personal attorney if you’re opting out to pursue an individual lawsuit.

What Happens Next

The 23andMe lawsuit is far from over. Bankruptcy creates obstacles, but it doesn’t make your claim worthless. Millions of customers had their most personal data exposed because of preventable security failures.

Watch your email for notifications from the court or claims administrator. When the claim submission period opens, act quickly.

Keep your breach notification email and any evidence of damages. Document ongoing problems related to the exposure. These records strengthen your claim and could increase your payout.

If you experienced serious identity theft or emotional harm, consider consulting an attorney about individual legal options. The class action covers everyone, but personal lawsuits can recover more for documented injuries.

Your DNA was stolen. That can’t be undone. But you can hold 23andMe accountable and get compensated for what happened.

If you're curious, also see Class Action Lawsuit List 2025: 47 Open Cases Now

A closely related topic: How to Start a Class Action Lawsuit: 7 Steps for 2026

Something similar worth reading: Shocking Entertainment Lawsuit 2026: Claims and Payouts

Never Miss a Lawsuit Update

Mark Lawfold as a Preferred Source so you never miss a settlement deadline or new filing.