The 23andMe data breach class action settlement—a court-approved resolution for a defined group—was the main collective compensation path. Arbitration and bankruptcy claims were separate individual routes, while account deletion and government enforcement do not provide the same personal cash recovery. For readers deciding now, deadlines control the outcome. The settlement is final, but its cash-claim and opt-out periods have ended.
Official resources:
- Explore the official data from Ca — Use this primary source to review the underlying data.
- Read the official notice from Ca — Use this primary source to verify the official announcement.
Table of Contents
- Who did the settlement cover?
- What happens after the settlement deadlines?
- Is arbitration still an alternative?
- What about a bankruptcy proof of claim?
- Government enforcement and data deletion
Who did the settlement cover?
The settlement covers about 6.4 million U.S. residents. They had to be 23andMe customers between May 1 and October 1, 2023, and receive notice that the breach affected them.
Exposed information could include genetic data, ancestry details, family relationships, and health-related reports. Available benefits included up to $10,000 for documented extraordinary losses and up to $165 for eligible health-information claims. Certain Alaska, California, Illinois, and Oregon residents could seek an estimated $100 statutory payment. The settlement also offered five years of monitoring, according to the court-authorized settlement administrator's eligibility and benefits FAQ.
What happens after the settlement deadlines?
The bankruptcy court approved the settlement on January 30, 2026. Its final amount was set at $46.75 million on July 7, with class payments expected in September 2026, according to the settlement administrator's case update. However, the cash-claim deadline passed February 17, 2026. The December 29, 2025 opt-out deadline also passed.
Class members who did nothing remain bound by the settlement but receive no cash reimbursement. Class membership alone does not produce a payment. A notice showing that the breach affected you is not a substitute for a timely cash claim. For timely claimants, the listed amounts are caps or estimates—not confirmation that every claimant will receive that figure.
Is arbitration still an alternative?
Arbitration was a distinct individual route rather than an additional settlement benefit. Customers were excluded from the settlement class if they had exercised arbitration through a pre-arbitration demand, arbitration demand, or formal arbitration complaint.
That exclusion matters for people who can document that they already pursued arbitration. The settlement materials do not establish a new arbitration opportunity for every customer now that the opt-out deadline has passed. A class member who took no action should not assume arbitration automatically provides a second chance.
What about a bankruptcy proof of claim?
A bankruptcy proof of claim is a filing asking the bankruptcy court to recognize that the debtor owes the filer money. This route was separate from submitting a class action settlement claim. The deadline for claims seeking money from 23andMe was July 14, 2025.
The Pennsylvania Office of Attorney General's deadline notice confirms that this route is unavailable for late breach-related claims. Anyone who filed by that deadline should preserve the proof of claim, filing confirmation, and later bankruptcy notices. A breach notice or settlement claim does not establish that a separate bankruptcy claim was filed.
Government enforcement and data deletion
Public enforcement remains separate from private compensation. California sued Chrome Holding Co., formerly 23andMe, in May 2026, alleging inadequate security and misleading breach statements affecting nearly seven million users, including 855,541 Californians. That lawsuit does not create a consumer claim form or promise an individual payment based on the available information.
Consumers should not confuse a government enforcement case with an approved compensation program. Account deletion addresses future privacy rather than past financial loss. Court-approved sale protections preserve customers' ability to delete their accounts and data permanently, while California law supports genetic-data deletion and sample-destruction requests, as explained in the California Department of Justice consumer alert. Consumers choosing this route should request all applicable deletion and sample destruction, then retain confirmation.
You Might Also Like
- 23andMe data breach settlement compensation for Vermont New Hampshire New York residents
- Data Breach Settlement Claim Timeline: Filing, Discovery, Settlement, and Trial
- AT&T Data Breach Settlement Mistakes: Deadlines and Documents Claimants Miss