Attorney General Paxton Secures $150 Million Settlement Against 23andMe Over Data Breach That Exposed Genetic Information of 6.9 Million People | Office of the Attorney General

Javascript must be enabled for the correct page display<br>Skip to main content

Español

About

News

Opinions

Careers

Contact Us

Search

Menu

Keywords

Search

&times;

Child Support

Your Online Account

Back to top of menu

Your Online Account

Paying and Receiving Child Support

About Your Online Account

Agency Partners

Child Support Enforcement

Pro­grams and Initiatives

Child Support Guidelines Review

Crime Victims

Crime Victims’ Compensation Program

Back to top of menu

Crime Victims’ Compensation Program

Victims of Crime

Crime Victims’ Compensation Program

How May We Help You?

Advocate Resources

Consumer Protection

File a Consumer Complaint

Back to top of menu

File a Consumer Complaint

Automotive Scams

Common Scams

Equifax

Identity Theft

Seniors and the Elderly

Open Government

2025 Texas Legislative Session Update

Back to top of menu

2025 Texas Legislative Session Update

Governmental Bodies

How to Request an Attorney General Opinion

Members of the Public

Open Meetings Act Suspension Updates

Open Records Complaint

Open Reports and Publications

Job Listings

All Divisions

Opinions

Initiatives

File a Complaint

About

Contact us

Español

Search Keywords

Search

July 15, 2026 | Press Release

Attor­ney Gen­er­al Pax­ton Secures $150 Mil­lion Set­tle­ment Against 23andMe Over Data Breach That Exposed Genet­ic Infor­ma­tion of 6.9 Mil­lion People

Attorney General Ken Paxton secured a settlement of bankruptcy claims against 23andMe, which helps resolve issues stemming from a 2023 data breach that compromised the genetic data of 6.9 million customers worldwide. The settlement includes $150 million for a multistate coalition of 42 states.<br>In October 2023, direct-to-consumer genetic testing company 23andMe announced that it had discovered a data breach affecting 6.9 million consumers. The breach exposed a wide range of customer data, including, in some cases, genetic ancestry information. Subsets of this data were later published for sale on the dark web. 23andMe learned about the breach months after the impacted personal information had become publicly available. The company initially denied that a breach had occurred and, after confirming it, blamed consumers for how their accounts were configured and how passwords were used.<br>In the immediate aftermath of the data breach, Attorney General Paxton joined a multistate investigation. The investigation found that 23andMe engaged in unreasonable data security practices and failed to implement adequate safeguards against hacking.<br>In March 2025, 23andMe filed for bankruptcy protection. As part of the bankruptcy proceedings, the participating states asserted claims arising from the data breach investigation. The resulting settlement incorporates many of the privacy and cybersecurity protections that likely would have been required through a traditional enforcement action. These include enhanced data security standards, comprehensive risk assessments, and the creation of an independent advisory board. Additionally, compliance with applicable state privacy laws will be enforced without exception, and the continued availability of consumer data deletion rights will be preserved. These requirements will help ensure that the TTAM Research Institute, now operating as the 23andMe Research Institute, serves as a more responsible steward of consumers' genetic information moving forward.<br>“The 23andMe data breach was a serious failure to protect consumers’ privacy that exposed the genetic information of millions of people,” said Attorney General Paxton. “Companies that collect and profit from Texans’ most personal information have a legal duty to protect it. This settlement sends a clear message that companies cannot cut corners on data security. It helps ensure stronger protections for consumers’ genetic information moving forward.”<br>Due to the finite amount of funds available in the bankruptcy estate and numerous other claims, recovery is limited to $18 million, which will be paid immediately from the available bankruptcy funds. Of the $18 million, Texas will receive $1,266,860. 23andMe also agreed to a $46.75 million class-action settlement in the bankruptcy to provide relief to affected U.S. consumers who submitted claims by February 17, 2026.<br>To read the settlement, click here.

Receive email updates from the OAG Press Office:

Email Address

Submit

Related News

CON­SUMER ALERT: Attor­ney Gen­er­al Ken Pax­ton Issues Guid­ance to Pro­tect Tex­ans from Flood-Relat­ed Scams and Price Gouging

July 17, 2026 | Press Release

Attor­ney Gen­er­al Ken Pax­ton Issues State­ment in Sup­port of House Res­o­lu­tion 50 to Affirm Texas’s Right to Secure Its Border

July 15, 2026 | Press Release

Attor­ney Gen­er­al Ken Pax­ton Inves­ti­gates LinkedIn for Adver­tis­ing...