23andMe Data Breach Settlement: Payments Expected September 2026

At a glance

Status

Approved, awaiting payment

Defendant

23andMe, Inc. (renamed ChromeCo, Inc.; parent 23andMe Holding Co. renamed Chrome Holding Co., following the 2025 TTAM Research Institute bankruptcy-sale asset purchase)

Settlement fund

$46,750,000

Claim deadline

February 17, 2026

No-proof cash option

Yes — Statutory Cash Claim: an estimated $100 (self-certification, tied to residency in a state with an applicable genetic-privacy/consumer-protection statute; does not require documented losses). or up to $10,000 for Extraordinary Claims (documented, unreimbursed losses fairly traceable to the breach). Health Information Claims pay up to $165 (eligibility-based on having health-report data exposed, not a pro-rata/no-proof tier).

Max documented payout

$10,000

Administrator

Kroll Settlement Administration LLC

Official site

www.23andmedatasettlement.com

Court

United States Bankruptcy Court for the Eastern District of Missouri (case administered there after the 23andMe Chapter 11 filing; the class action originated in the U.S. District Court for the Northern District of California)

Case number

24-md-03098-EMC (N.D. Cal., original MDL); 25-40976-357 (Bankr. E.D. Mo., bankruptcy case)

Last verified September 9, 2026

Key dates

Milestone	Date	What it means
Claim deadline	February 17, 2026(passed)	Last day to file for a payment
Opt-out (exclusion) deadline	December 29, 2025(passed)	Last day to leave the settlement and keep the right to sue
Objection deadline	December 29, 2025(passed)	Last day to object to the terms
Final approval hearing	January 20, 2026(passed)	When the judge decides whether to approve the settlement
Expected payout	Not yet scheduled	Payments are not sent until after final approval and any appeals

Where to file

23andMe Data Breach Settlement is administered by Kroll Settlement Administration LLC. The only place to file is the official settlement website:

Verify on the official site

www.23andmedatasettlement.com

Filing is free. No legitimate settlement charges a fee to file a claim.

You cannot file on RecordingLaw.com. We are an independent publisher, not the settlement administrator, and we are not affiliated with any court, agency, or defendant.

What Happened

23andMe is a consumer genetic-testing company. Customers who used the service between May 1, 2023 and October 1, 2023 later received a notice that their personal information had been compromised in a cyberattack, according to the official settlement site. That is what makes this case unusual among data-breach settlements: 23andMe holds ancestry and genetic information, not just names and account numbers, so the fallout and the settlement benefits are built around that.

According to the official settlement site, approximately 6.4 million U.S. residents were affected. You may see other figures reported elsewhere; treat the official settlement site's own number as the reliable one.

Before the case could be fully resolved, 23andMe filed for Chapter 11 bankruptcy in 2025. Its assets were later purchased by TTAM Research Institute, and the company was renamed; the case caption today lists ChromeCo, Inc. (formerly 23andMe, Inc.) and Chrome Holding Co. (formerly 23andMe Holding Co.). That bankruptcy is why this case now moves through a bankruptcy court instead of a normal civil docket, and why payment is delayed even after approval.

Where the Settlement Stands Right Now, and Why You Have Not Been Paid

As of September 9, 2026, this settlement is approved and the administrator expects payments to go out in September 2026, but no money has been distributed yet. Approval and payment are two different things, so it is worth separating them.

Final approval is a judge signing off that the settlement's terms are fair and can move forward. That happened on January 30, 2026, following a January 20, 2026 final approval hearing. The deal is no longer just proposed; it is legally confirmed.

Payment is a different step, and it has not happened. Because 23andMe is in Chapter 11 bankruptcy, the settlement fund cannot simply be cut into checks the way an ordinary class action would. It has to move through the bankruptcy case's own claims-reconciliation process first, where the estate sorts out who is owed what and confirms figures before any money moves. That process has run through 2026: the court approved a final settlement amount of $46.75 million on July 7, 2026, and the official settlement site now says class member payments are expected to be distributed in September. That is the administrator's own expectation rather than a court-ordered payment date, so check the official site before assuming a check is on the way.

If you filed a claim and you're waiting, that is the expected state of things right now. It is not a sign your claim was lost or rejected.

Who Is in the Class

You may be a class member if all of the following are true, based on the official class definition:

• You were a 23andMe customer at some point between May 1, 2023 and October 1, 2023.
• You are a U.S. resident.
• You received a notice from 23andMe (or its successor) stating that your personal information was compromised in the 2023 breach.

The official settlement site puts the class at approximately 6.4 million U.S. residents. Some class members also had health-report data exposed, which opens a separate payment tier described below; whether that applies to you depends on the notice 23andMe sent, not on anything you can self-determine here.

How Much People Realistically Get

Start with the honest version: most people who filed will not see anywhere near the top-line dollar figures sometimes quoted for this case. The settlement has three different payment tiers, and which one applies to you (if any) depends on your situation and, in one case, on what state you live in.

A statutory cash claim. This is the closest thing to a no-proof option: a self-certified payment that does not require documentation of a financial loss. It is only available to class members who were residents of Alaska, California, Illinois, or Oregon at any time between May 1, 2023 and October 1, 2023, so not every class member qualifies for it. The estimated amount is around $100, adjusted pro rata based on how many valid claims were filed; it is an estimate, not a guarantee.

A health-information payment. If 23andMe told you your health-report data specifically was exposed, you may be eligible for a payment of up to $165. This tier is tied to that specific type of exposure, not available to every class member.

An extraordinary-claim payment. This is the tier capped at up to $10,000, and it is the one most often quoted in headlines. It requires documented, unreimbursed losses that are fairly traceable to the breach, meaning receipts, statements, or other records showing an actual out-of-pocket loss connected to the incident. Very few claimants qualify for the maximum, and this figure should not be read as a typical outcome.

On top of the cash tiers, the settlement includes a non-cash benefit: five years of genetic and medical-data monitoring for settlement class members, separate from any cash payment. That benefit reflects what was actually exposed here. This is a genetic-privacy and consumer-data case, not the kind of biometric-identifier case (fingerprints, faceprints) covered by laws like Illinois's BIPA.

What Proof You Actually Need

Proof requirements track the three tiers above. The statutory cash claim needs no loss documentation, only that you meet the class definition and attest to a residential address in Alaska, California, Illinois, or Oregon at some point between May 1, 2023 and October 1, 2023. The health-information payment depends on whether 23andMe's own records show your health data was exposed, not on anything you submit. The extraordinary-claim tier is the one that requires real records: bank or credit statements, evidence of identity theft or fraud, or other documentation tying a specific financial loss to this breach.

How the Filing Process Worked

The official claims administrator for this settlement is Kroll Settlement Administration LLC, and the only official source for filing, checking a claim, or getting a status update is the court-authorized settlement site. Filing was free. If you filed by the February 17, 2026 deadline, there is nothing further to submit; you wait for the reconciliation process described above to run its course.

Not the Same as the State Attorneys General Settlement

Separately from this consumer class-action settlement, a coalition of state attorneys general reached its own settlement with 23andMe's bankruptcy estate over the same underlying data-security failures. That is a government enforcement action, not a consumer claims process; the money goes to state governments, not to individual people who filed claims. If you already filed a claim in the settlement described on this page, the attorneys general settlement does not add a second payout you can personally apply for, and there is no consumer claim form connected to it.

If You Missed the Deadline or Never Filed

The claim window for this settlement is closed and it will not reopen. If you got a breach notice from 23andMe and never filed, or you are only learning about this now, there is no way to submit a late claim through this settlement.

What you can still do, regardless of whether you filed: place a free credit freeze with all three major credit bureaus, which blocks new accounts from being opened in your name. Watch your financial accounts and any correspondence referencing your 23andMe data. If you believe you have been a victim of identity theft connected to this or any breach, IdentityTheft.gov, the FTC's official recovery site, walks through a free personal recovery plan.

Be skeptical of anything that arrives after the fact offering to file a claim for you, recover a payment for you, or unlock a "second settlement." The real settlement site does not charge a fee and does not need a third party to act on your behalf.

Frequently Asked Questions

Is the 23andMe data breach settlement still accepting claims?

No. As of September 9, 2026, the claim window is closed. The deadline to file a claim was February 17, 2026, and no new claims can be submitted through this settlement.

Did a judge actually approve the 23andMe settlement?

Yes. A bankruptcy judge granted final approval of the 23andMe data breach settlement on January 30, 2026, following a final approval hearing held January 20, 2026.

Why haven't I been paid yet if the settlement was approved?

Final approval and payment are different steps. Because 23andMe is in Chapter 11 bankruptcy, the settlement fund must move through the bankruptcy case's own claims-reconciliation process before any money goes out. No money had been distributed as of September 9, 2026, though the administrator now says payments are expected to go out in September 2026.

When will I get my 23andMe settlement payment?

The official settlement site says class member payments are expected to be distributed in September 2026. That is the administrator's stated expectation rather than a court-ordered payment date, so it can slip; the bankruptcy reconciliation process controls the timing, not a fixed schedule.

How much money will I actually get from the 23andMe settlement?

It depends on which tier applies to you. Most eligible claimants are more likely to see an estimated statutory cash payment of around $100 (available only to people who lived in Alaska, California, Illinois, or Oregon between May 1 and October 1, 2023) or a health-information payment of up to $165 than the $10,000 extraordinary-claim ceiling, which requires documented losses and is not typical.

What is the five years of genetic monitoring benefit in the 23andMe settlement?

Settlement class members get a five years of genetic and medical-data monitoring benefit separate from any cash payment, reflecting that this breach exposed genetic and health information, not the kind of biometric identifiers covered by laws like Illinois's BIPA.

Is the state attorneys general settlement with 23andMe a second payment I can claim?

No. A separate multistate settlement between 23andMe's bankruptcy estate and a coalition of state attorneys general pays money to state governments, not to individual consumers, and has no consumer claim form.

I missed the 23andMe settlement deadline. Can I still file?

No, the claim window closed February 17, 2026 and cannot be reopened. If you're worried about identity theft from this breach, you can still freeze your credit for free at all three bureaus and use IdentityTheft.gov for a recovery plan.

Is 23andMe still in business?

The original 23andMe entities were renamed after a 2025 bankruptcy sale of the company's assets to TTAM Research Institute; the settlement's case caption now lists ChromeCo, Inc. and Chrome Holding Co. as the defendants.