23andMe Data Breach Settlement: Approved, Not Yet Paid
At a glance
- Status
- Approved, awaiting payment
- Defendant
- 23andMe, Inc. (renamed ChromeCo, Inc.; parent 23andMe Holding Co. renamed Chrome Holding Co., following the 2025 TTAM Research Institute bankruptcy-sale asset purchase)
- Settlement fund
- $46,750,000
- Claim deadline
- February 17, 2026
- No-proof cash option
- Yes — Statutory Cash Claim: an estimated $100 (self-certification, tied to residency in a state with an applicable genetic-privacy/consumer-protection statute; does not require documented losses). or up to $10,000 for Extraordinary Claims (documented, unreimbursed losses fairly traceable to the breach). Health Information Claims pay up to $165 (eligibility-based on having health-report data exposed, not a pro-rata/no-proof tier).
- Max documented payout
- $10,000
- Administrator
- Kroll Settlement Administration LLC
- Official site
- www.23andmedatasettlement.com
- Court
- United States Bankruptcy Court for the Eastern District of Missouri (case administered there after the 23andMe Chapter 11 filing; the class action originated in the U.S. District Court for the Northern District of California)
- Case number
- 24-md-03098-EMC (N.D. Cal., original MDL); 25-40976-357 (Bankr. E.D. Mo., bankruptcy case)
Last verified July 16, 2026
Key dates
| Milestone | Date | What it means |
|---|---|---|
| Claim deadline | February 17, 2026(passed) | Last day to file for a payment |
| Opt-out (exclusion) deadline | December 29, 2025(passed) | Last day to leave the settlement and keep the right to sue |
| Objection deadline | December 29, 2025(passed) | Last day to object to the terms |
| Final approval hearing | January 20, 2026(passed) | When the judge decides whether to approve the settlement |
| Expected payout | Not yet scheduled | Payments are not sent until after final approval and any appeals |
Where to file
23andMe Data Breach Settlement is administered by Kroll Settlement Administration LLC. The only place to file is the official settlement website:
Verify on the official sitewww.23andmedatasettlement.com
Filing is free. No legitimate settlement charges a fee to file a claim.
You cannot file on RecordingLaw.com. We are an independent publisher, not the settlement administrator, and we are not affiliated with any court, agency, or defendant.
What Happened
23andMe is a consumer genetic-testing company. Customers who used the service between May 1, 2023 and October 1, 2023 later received a notice that their personal information had been compromised in a cyberattack, according to the official settlement site. That is what makes this case unusual among data-breach settlements: 23andMe holds ancestry and genetic information, not just names and account numbers, so the fallout and the settlement benefits are built around that.
According to the official settlement site, approximately 6.4 million U.S. residents were affected. You may see other figures reported elsewhere; treat the official settlement site's own number as the reliable one.
Before the case could be fully resolved, 23andMe filed for Chapter 11 bankruptcy in 2025. Its assets were later purchased by TTAM Research Institute, and the company was renamed; the case caption today lists ChromeCo, Inc. (formerly 23andMe, Inc.) and Chrome Holding Co. (formerly 23andMe Holding Co.). That bankruptcy is why this case now moves through a bankruptcy court instead of a normal civil docket, and why payment is delayed even after approval.
Where the Settlement Stands Right Now, and Why You Have Not Been Paid
As of July 2026, this settlement is approved but unpaid. Those two facts confuse people, so it is worth separating them.
Final approval is a judge signing off that the settlement's terms are fair and can move forward. That happened on January 30, 2026, following a January 20, 2026 final approval hearing. The deal is no longer just proposed; it is legally confirmed.
Payment is a different step, and it has not happened. Because 23andMe is in Chapter 11 bankruptcy, the settlement fund cannot simply be cut into checks the way an ordinary class action would. It has to move through the bankruptcy case's own claims-reconciliation process first, where the estate sorts out who is owed what and confirms figures before any money moves. That can take months, and the official settlement site does not commit to a distribution date. There is no confirmed payout date as of this writing, and this page will not invent one.
If you filed a claim and you're waiting, that is the expected state of things right now. It is not a sign your claim was lost or rejected.
Who Is in the Class
You may be a class member if all of the following are true, based on the official class definition:
- You were a 23andMe customer at some point between May 1, 2023 and October 1, 2023.
- You are a U.S. resident.
- You received a notice from 23andMe (or its successor) stating that your personal information was compromised in the 2023 breach.
The official settlement site puts the class at approximately 6.4 million U.S. residents. Some class members also had health-report data exposed, which opens a separate payment tier described below; whether that applies to you depends on the notice 23andMe sent, not on anything you can self-determine here.
How Much People Realistically Get
Start with the honest version: most people who filed will not see anywhere near the top-line dollar figures sometimes quoted for this case. The settlement has three different payment tiers, and which one applies to you (if any) depends on your situation and, in one case, on what state you live in.
A statutory cash claim. This is the closest thing to a no-proof option: a self-certified payment that does not require documentation of a financial loss. It is only available to class members who live in a state with an applicable genetic-privacy or consumer-protection statute, so not every class member qualifies for it. The estimated amount is around $100, adjusted pro rata based on how many valid claims were filed; it is an estimate, not a guarantee.
A health-information payment. If 23andMe told you your health-report data specifically was exposed, you may be eligible for a payment of up to $165. This tier is tied to that specific type of exposure, not available to every class member.
An extraordinary-claim payment. This is the tier capped at up to $10,000, and it is the one most often quoted in headlines. It requires documented, unreimbursed losses that are fairly traceable to the breach, meaning receipts, statements, or other records showing an actual out-of-pocket loss connected to the incident. Very few claimants qualify for the maximum, and this figure should not be read as a typical outcome.
On top of the cash tiers, the settlement includes a non-cash benefit: five years of genetic and medical-data monitoring for settlement class members, separate from any cash payment. That benefit reflects what was actually exposed here. This is a genetic-privacy and consumer-data case, not the kind of biometric-identifier case (fingerprints, faceprints) covered by laws like Illinois's BIPA.
What Proof You Actually Need
Proof requirements track the three tiers above. The statutory cash claim needs no loss documentation, only that you meet the class definition and, where applicable, the state-residency condition. The health-information payment depends on whether 23andMe's own records show your health data was exposed, not on anything you submit. The extraordinary-claim tier is the one that requires real records: bank or credit statements, evidence of identity theft or fraud, or other documentation tying a specific financial loss to this breach.
How the Filing Process Worked
The official claims administrator for this settlement is Kroll Settlement Administration LLC, and the only official source for filing, checking a claim, or getting a status update is the court-authorized settlement site. Filing was free. If you filed by the February 17, 2026 deadline, there is nothing further to submit; you wait for the reconciliation process described above to run its course.
Not the Same as the State Attorneys General Settlement
Separately from this consumer class-action settlement, a coalition of state attorneys general reached its own settlement with 23andMe's bankruptcy estate over the same underlying data-security failures. That is a government enforcement action, not a consumer claims process; the money goes to state governments, not to individual people who filed claims. If you already filed a claim in the settlement described on this page, the attorneys general settlement does not add a second payout you can personally apply for, and there is no consumer claim form connected to it.
If You Missed the Deadline or Never Filed
The claim window for this settlement is closed and it will not reopen. If you got a breach notice from 23andMe and never filed, or you are only learning about this now, there is no way to submit a late claim through this settlement.
What you can still do, regardless of whether you filed: place a free credit freeze with all three major credit bureaus, which blocks new accounts from being opened in your name. Watch your financial accounts and any correspondence referencing your 23andMe data. If you believe you have been a victim of identity theft connected to this or any breach, IdentityTheft.gov, the FTC's official recovery site, walks through a free personal recovery plan.
Be skeptical of anything that arrives after the fact offering to file a claim for you, recover a payment for you, or unlock a "second settlement." The real settlement site does not charge a fee and does not need a third party to act on your behalf.
Frequently Asked Questions
Is the 23andMe data breach settlement still accepting claims?
No. As of July 2026, the claim window is closed. The deadline to file a claim was February 17, 2026, and no new claims can be submitted through this settlement.
Did a judge actually approve the 23andMe settlement?
Yes. A bankruptcy judge granted final approval of the 23andMe data breach settlement on January 30, 2026, following a final approval hearing held January 20, 2026.
Why haven't I been paid yet if the settlement was approved?
Final approval and payment are different steps. Because 23andMe is in Chapter 11 bankruptcy, the settlement fund must move through the bankruptcy case's own claims-reconciliation process before any money goes out, and that has not finished as of this writing.
When will I get my 23andMe settlement payment?
There is no confirmed payment date as of July 2026. The official settlement site has not announced a distribution date; it depends on the bankruptcy reconciliation process rather than a fixed schedule.
How much money will I actually get from the 23andMe settlement?
It depends on which tier applies to you. Most eligible claimants are more likely to see an estimated statutory cash payment of around $100 or a health-information payment of up to $165 than the $10,000 extraordinary-claim ceiling, which requires documented losses and is not typical.
What is the five years of genetic monitoring benefit in the 23andMe settlement?
Settlement class members get a five years of genetic and medical-data monitoring benefit separate from any cash payment, reflecting that this breach exposed genetic and health information, not the kind of biometric identifiers covered by laws like Illinois's BIPA.
Is the state attorneys general settlement with 23andMe a second payment I can claim?
No. A separate multistate settlement between 23andMe's bankruptcy estate and a coalition of state attorneys general pays money to state governments, not to individual consumers, and has no consumer claim form.
I missed the 23andMe settlement deadline. Can I still file?
No, the claim window closed February 17, 2026 and cannot be reopened. If you're worried about identity theft from this breach, you can still freeze your credit for free at all three bureaus and use IdentityTheft.gov for a recovery plan.
Is 23andMe still in business?
The original 23andMe entities were renamed after a 2025 bankruptcy sale of the company's assets to TTAM Research Institute; the settlement's case caption now lists ChromeCo, Inc. and Chrome Holding Co. as the defendants.
How to tell a settlement notice is real
Check the case name, case number, and court against the official settlement site. Go to that site directly instead of clicking a link in an email or text. Nobody legitimate will call, text, or email out of the blue asking for your Social Security number, bank account, or card details, and nobody will charge you to file. Report anyone who does at ReportFraud.ftc.gov.
Informational only. Not legal, tax, or financial advice, and not affiliated with any settlement.
RecordingLaw.com is an independent legal-information publisher. We are not a law firm, not a settlement administrator, and not affiliated with, endorsed by, or acting on behalf of any court, government agency, defendant, or claims administrator described on this page. Reading this page does not create an attorney-client relationship.
We do not process claims and we never collect your claim information. You cannot file a claim on RecordingLaw.com. To file, opt out, object, or check your status, use only the official settlement administrator identified above. We link to it for your convenience.
Filing a legitimate claim is free. No legitimate settlement or administrator will charge you a fee to file, or ask for your Social Security number, bank, or card details by unsolicited call, text, or email. If someone does, it is likely a scam. Report it at ReportFraud.ftc.gov.
Deadlines, amounts, and approval status change and are set by the court. We verify against the official administrator and court records, but confirm the current details on the official site before acting. Nothing here guarantees eligibility, a payment, or any amount. Settlement payments may be taxable. See IRS Publication 4345. and consult a tax professional. For advice about your specific situation, consult a licensed attorney in your state. Affiliate disclosure.
Sources and References
- U.S. Bankruptcy Court, Eastern District of Missouri — In re 23andMe Holding Co., Case No. 25-40976, case caption(moeb.uscourts.gov).gov
- Colorado Attorney General — Multistate settlement of bankruptcy claims against 23andMe over genetic data breach(coag.gov).gov
- FTC IdentityTheft.gov — Data breach recovery steps(identitytheft.gov).gov
- In re: 23andMe, Inc. Customer Data Security Breach Litigation — Official Settlement Website (Kroll Settlement Administration)(23andmedatasettlement.com)
- 23andMe Data Settlement — Frequently Asked Questions (official)(23andmedatasettlement.com)