
23andMe Data Breach Settlement: Approved, Not Yet Paid
The 23andMe settlement's claim window closed Feb 17, 2026 and a judge granted final approval Jan 30, 2026. Payment is on hold in bankruptcy. Here's why.
Loading...
79 articles · page 1 of 2

The 23andMe settlement's claim window closed Feb 17, 2026 and a judge granted final approval Jan 30, 2026. Payment is on hold in bankruptcy. Here's why.

Learn Alabama's data breach notification rules under the 2018 Act, including the 45-day deadline, AG reporting requirements, penalties, and exemptions.

Alaska requires breach notification without unreasonable delay. One of ~12 states with a private right of action for actual damages up to $500.
ApolloMD data breach settlement is open for claims through Sept 30, 2026. $4.02M fund, $75 no-proof payment or up to $5,000 documented loss reimbursement.

Arizona requires data breach notification within 45 days under A.R.S. §§ 18-551 and 18-552. Learn who must report, what triggers notice, and penalties up to $500,000.

Learn Arkansas data breach notification rules under the Personal Information Protection Act, including reporting timelines, AG requirements, and penalties.

AT&T's $177M data breach settlement closed claims Dec 18, 2025. The Jan 15, 2026 hearing happened, but the judge hasn't ruled. No payout date exists yet.

California requires breach notification within 30 days under SB 446. Learn who must comply, what triggers notice, CCPA damages, and AG reporting rules.

The $15M Cash App data breach settlement is approved, not yet paid, as of July 2026. See status, payout tiers, and 3 similar Cash App cases explained.
As of July 2026, no Change Healthcare settlement, fund, or claim form exists. MDL 3108 is still pending in Minnesota federal court. What to do now.

Colorado requires data breach notification within 30 days. Learn who must comply, what personal information is protected, AG reporting rules, and penalties.

Comcast's $117.5M Xfinity data breach settlement is open through Sept. 14, 2026. File free at the official site, no proof needed for the cash option.

Connecticut requires 60-day breach notification, 24-month credit monitoring for SSN breaches, and AG reporting. Learn the rules under Conn. Gen. Stat. 36a-701b.

Delaware requires data breach notification within 60 days. Learn who must comply, what data triggers reporting, AG notice rules, and encryption safe harbor.

DC requires breach notification without unreasonable delay and AG notice when 50+ residents are affected. Learn about the private right of action, 18-month identity theft protection, and penalties.

Esse Health's data breach settlement claim window closes August 4, 2026. See who's eligible, the ~$50 no-proof payout, and how to file for free.

The Evolve Bank & Trust data breach settlement is paid. Checks went out March 30, 2026. Here is who was covered and what people actually got.

Fidelity's data breach settlement claim window closes July 27, 2026. See who may be eligible, the ~$100 pro rata payment, and how to file for free.

The $31.5M Flagstar Bank data breach settlement is open. Claims are due August 11, 2026. See who is covered and what a realistic payout looks like.

Learn Florida's 30-day data breach notification deadline, penalty structure up to $500,000, AG reporting rules, and encryption safe harbor under Fla. Stat. 501.171.

Georgia's data breach notification law requires notice without unreasonable delay but sets no deadline, no AG reporting, and no penalties. Full breakdown of Ga. Code 10-1-912.
GRIPA's $2.15M MOVEit data breach settlement is open. File by September 3, 2026 for cash or documented-loss reimbursement plus free identity protection.

A credit freeze is free at Equifax, Experian, and TransUnion by federal law. Step-by-step for all three, plus freeze vs. fraud alert vs. lock.

Learn Idaho data breach notification rules, the 24-hour agency reporting deadline, protected data categories, encryption safe harbor, and penalties up to $25,000.

Learn Illinois data breach notification rules under 815 ILCS 530, including reporting timelines, AG notification thresholds, encryption safe harbor, and penalties.

Indiana requires data breach notification within 45 days. Learn who must be notified, what personal information triggers the law, penalties up to $150,000, and the biometric data gap.

Kansas requires businesses to investigate breaches and notify residents without unreasonable delay under K.S.A. 50-7a01. Learn about PI definitions, safe harbors, and penalties.

Learn Kentucky data breach notification requirements under KRS 365.732 and government rules under KRS 61.931-934, including timing, encryption safe harbor, and penalties.
The $35M Labcorp AMCA data breach settlement is open. Claim deadline is September 3, 2026. See who qualifies and how to file at the official site.
Lands' End data breach settlement claims are open through Oct 22, 2026. $60 flat payment, no proof needed, or up to $5,000 with documentation.

LastPass's July 2, 2026 claim deadline has passed. As of July 16, the court has not entered final approval and no payment date is set. Here's what's next.
The Lee University data breach settlement is open. Deadline is Aug 19, 2026. ~$100 no-proof payment, up to $5,000 with proof, and how to file free.
The Lemonade data breach settlement claim window is open. The deadline to file is September 8, 2026. See who's eligible and how to file for free.

Louisiana requires data breach notification within 60 days. Learn who must report, what data is protected, AG reporting rules, and penalties under La. R.S. 51:3071.

Maine requires data breach notification within 30 days. Learn who must comply, what triggers notification, encryption safe harbors, and penalties under state law.
Pending approval: Marlboro-Chesterfield Pathology data breach settlement. $10 no-proof payment or up to $1,000 for documented losses. File by Aug 21, 2026.

Maryland requires data breach notification within 45 days. Learn about AG-first reporting, protected personal information, encryption safe harbors, and penalties.

Learn Massachusetts data breach notification rules under Chapter 93H and 201 CMR 17.00, including WISP requirements, penalties, and credit monitoring obligations.

Michigan data breach notification law requires businesses to notify residents of security breaches involving personal information. Learn timelines, penalties, and safe harbors under MCL 445.72.

Minnesota requires breach notification without unreasonable delay when names plus SSNs, driver's licenses, or financial accounts are exposed. No AG notice required.
Mission Community Hospital data breach settlement claims are open through Aug 12, 2026. $100 payment plus monitoring, or up to $5,000 with proof.

Mississippi data breach notification law (Miss. Code 75-24-29) requires notice without unreasonable delay. No AG reporting required. Learn triggers, exemptions, and penalties.

Missouri data breach notification law (Mo. Rev. Stat. 407.1500) requires prompt notice to affected residents. Learn timelines, penalties up to $150K, and AG enforcement rules.

Montana requires data breach notification without unreasonable delay under Mont. Code 30-14-1704. Learn who must be notified, protected data types, AG reporting rules, and penalties.
Deadline is August 7, 2026 for the Motility Software data breach settlement: ~$75 no-proof cash or up to $5,000 with proof, plus 2 years free monitoring.
The $3.3M Mt. Baker Imaging & Northwest Radiologists data breach settlement is open. Claim deadline: August 19, 2026. See who is eligible and how to file.

No National Public Data breach settlement or claim form exists as of July 2026. The company's bankruptcy was dismissed. Here is what actually helps.

Nebraska requires data breach notification without unreasonable delay under Neb. Rev. Stat. 87-801. Learn about broad PI coverage including biometrics, AG notification, and the cybersecurity safe harbor.

Nevada requires data breach notification without unreasonable delay under NRS 603A. Learn about protected data types, PCI DSS mandate, no AG notification requirement, and the encryption safe harbor.

New Hampshire requires data breach notification as quickly as possible under RSA 359-C:20. Learn about AG pre-notification, the $5,000 substitute notice threshold, CRA reporting, and penalties.

New Jersey requires data breach notification in the most expedient time possible, with no fixed day-count deadline. Learn about the CFA private right of action, AG and State Police reporting, and penalties up to $20K.

New Mexico requires data breach notification within 45 days of discovery under N.M. Stat. 57-12C. Learn about biometric data coverage, AG reporting, HIPAA/GLBA exemptions, and enforcement.

New York requires data breach notification within 30 days under the SHIELD Act. Learn who must be notified, safeguard requirements, and penalties up to $250K.

North Carolina requires breach notification without unreasonable delay. Violations are UDTP offenses with treble damages and a private right of action under N.C. Gen. Stat. 75-65.

North Dakota requires breach notification without unreasonable delay and AG notice at 250+ affected individuals. Penalties up to $5,000 per violation under N.D. Cent. Code 51-30.

Ohio requires data breach notification within 45 days. Escalating penalties reach $10,000/day. The Ohio Data Protection Act offers a cybersecurity safe harbor under ORC 1349.19.

Oklahoma requires breach notification without unreasonable delay. SB 626 (effective Jan 2026) adds biometric data, 60-day AG deadline, and $150K penalty cap.

The Onsite Mammography data breach settlement is open. Claim deadline: August 11, 2026. Who may be eligible and what people can realistically get.

Oregon requires data breach notification within 45 days. AG notice at 250+, CRA at 1,000+. Penalties up to $500,000 for continuing violations under ORS 646A.604.

Pennsylvania requires breach notification without unreasonable delay. The 2024 BPINA amendment adds AG notice at 500+, 12-month credit monitoring, and health insurance data coverage.