The 23andMe data breach settlement has received final approval, and if you were a customer between May 1, 2023 and October 1, 2023 whose data was compromised, you may be entitled to compensation ranging from free monitoring services up to $10,000 in documented losses. The settlement covers approximately 6.4 million U.S. residents whose personal and genetic data was stolen in a cyberattack announced on October 6, 2023.
For most claimants, the standard filing deadline of February 17, 2026 has already passed — but if you received your breach notice on January 5, 2026, you have until March 1, 2026 to file. The settlement fund totals between $30 and $50 million and was granted final approval on January 30, 2026. What makes this case unusually complicated is that 23andMe filed for Chapter 11 bankruptcy in March 2025, meaning actual payment distribution is tied to both the bankruptcy proceedings and any outstanding appeals.
Table of Contents
- What Are the Key Dates in the 23andMe Settlement, and Has the Deadline Passed?
- Who Is Eligible for the 23andMe Settlement Payout?
- What Are the Compensation Tiers and How Much Could You Receive?
- When Will 23andMe Settlement Payments Actually Be Distributed?
- How Does 23andMe’s Bankruptcy Affect Settlement Claimants?
- What About the Canadian 23andMe Settlement?
- What Happens Next for 23andMe and Affected Customers?
- Frequently Asked Questions
What Are the Key Dates in the 23andMe Settlement, and Has the Deadline Passed?
The settlement timeline has several critical dates, and understanding which ones are still relevant to you depends on when you received your breach notification. The opt-out and objection deadline passed on December 29, 2025. The final approval hearing was held on January 20, 2026, and the court granted final approval ten days later, on January 30, 2026. For most affected customers, the claim filing deadline was February 17, 2026 — that date has now passed. However, there is one remaining open window.
Customers who received their official breach notice on January 5, 2026 — a later wave of notifications sent by 23andme — were given a separate extended deadline of March 1, 2026. If you fall into that group and have not yet filed, that deadline is still active as of this writing. Check the official settlement site at 23andmedatasettlement.com to confirm whether your notification date qualifies you for the extended window. For those who missed both deadlines, there is still one benefit available without any filing requirement: five years of free Privacy & Medical Shield plus Genetic Monitoring coverage. 23andMe has made this available to all affected customers regardless of whether a claim was submitted, and it does not require the bankruptcy proceedings to conclude before it takes effect.
Who Is Eligible for the 23andMe Settlement Payout?
Eligibility is defined by three criteria. You must have been a 23andMe customer during the period spanning May 1, 2023 through October 1, 2023. You must have lived in the United States during that time. And critically, you must have received a notification from 23andMe confirming that your data was among the information compromised in the breach. If you did not receive such a notice, you would not qualify for a cash claim — even if you were a 23andMe customer during the relevant window. This third requirement is worth emphasizing because it has caused confusion.
The October 2023 cyberattack did not expose every 23andMe customer’s data equally. The attackers used a technique called credential stuffing — exploiting reused passwords — to access individual accounts, and then harvested additional data through the DNA Relatives feature, which links users who share genetic markers. As a result, some customers had minimal information exposed while others had detailed genetic health data accessed. The tier of compensation you qualified for depended on exactly what type of data was stolen. There is one exception worth noting: customers who previously opted out of the class action settlement before the December 29, 2025 deadline are not covered by this settlement at all. If you opted out, you retained the right to pursue individual litigation against 23andMe, though given the company’s bankruptcy status, the practical value of that path is uncertain.
What Are the Compensation Tiers and How Much Could You Receive?
The settlement offers three distinct compensation tiers, each requiring different levels of documentation and covering different types of harm. The highest tier, Extraordinary Claims, pays up to $10,000 and is reserved for claimants who can document actual out-of-pocket losses directly caused by the breach — things like identity theft remediation costs, fraudulent account charges, or professional fees paid for data protection services after the breach. This tier requires the most documentation and will see the lowest number of successful claimants. The second tier, Health Information Claims, provides up to $165 for customers whose genetic health data was specifically accessed — meaning the breach exposed not just basic profile information but sensitive details about inherited health conditions or disease risk factors. The third tier, Statutory Cash Claims, pays approximately $100 and is available to residents of certain qualifying states whose consumer protection or privacy statutes entitle them to statutory damages.
Not all states qualify, which is a limitation many claimants discovered only when reading the fine print of their claim forms. For context, a customer in California who had their basic profile data accessed might qualify only for the $100 statutory tier. A customer in any state who had genetic health information specifically accessed could qualify for up to $165 under the health tier. And someone who had their identity stolen and paid for a credit monitoring service out of pocket as a direct result of the breach could potentially claim up to $10,000 under the extraordinary tier — provided they can produce receipts and documentation. The free five-year monitoring benefit is available across all tiers and is not mutually exclusive with filing a cash claim.
When Will 23andMe Settlement Payments Actually Be Distributed?
This is where the complication of the company’s bankruptcy becomes most relevant to claimants. Under normal circumstances, a settlement of this type would begin distributing payments approximately 60 to 90 days after final approval — which, given the January 30, 2026 approval date, would suggest an initial payment window somewhere around April or May 2026. However, that timeline assumes no appeals are filed and that the bankruptcy proceedings do not interfere. 23andMe filed for Chapter 11 bankruptcy in March 2025 and has since been operating under the name “Chrome.” In a Chapter 11 bankruptcy, the company continues to operate while restructuring its debts, but class action settlement payments are treated as a claim against the bankruptcy estate.
This means the settlement fund must be reconciled with the broader bankruptcy process before distributions can go out. The realistic expectation, based on the current posture of the case, is that payments could be delayed by several months or longer beyond the standard 60-to-90-day window. Claimants should be cautious of any third-party services offering to advance settlement payments or “help” collect your funds. The only legitimate distribution will come through the official settlement administrator. If you filed a valid claim, you do not need to take any further action to receive payment — the administrator will contact you directly when distributions are processed.
How Does 23andMe’s Bankruptcy Affect Settlement Claimants?
The bankruptcy filing is the single most consequential factor affecting how and when this settlement pays out. When a company files Chapter 11, an automatic stay goes into effect that generally halts most civil litigation and collections against the company. However, in this case, the settlement had already been negotiated and approved within the bankruptcy framework, meaning the $30-to-$50 million fund is theoretically protected and set aside for claimants. The risk for claimants is not that the fund disappears — it’s that the bankruptcy process introduces procedural delays and the possibility that appeals from other creditors or objecting parties could further extend the timeline.
There is also the question of whether 23andMe’s assets, under its new “Chrome” branding, will be sufficient to honor the full settlement if claims volume or administrative costs exceed initial projections. Courts do have mechanisms to handle these scenarios, but they add uncertainty. One practical warning: because the company is in bankruptcy, do not expect 23andMe’s customer service channels to be responsive to settlement-specific inquiries. All official questions about your claim status, payment timing, and documentation requirements should be directed to the settlement administrator through the official site at 23andmedatasettlement.com. Do not rely on unofficial sources or forums for status updates, as misinformation about bankruptcy timelines circulates widely.
What About the Canadian 23andMe Settlement?
A parallel settlement covering Canadian customers was also approved in early February 2026. That settlement totals $3.25 million Canadian dollars and covers more than 300,000 Canadian customers affected by the same breach. The approval was granted by a Canadian court, separate from the U.S. proceedings, and the terms differ from the American settlement in compensation structure and administration.
Canadian claimants should consult the Canadian settlement administrator directly, as the U.S. settlement site and U.S. claim deadlines do not apply to them. The two settlements were negotiated and approved independently, and filing under one does not affect eligibility under the other for those who might have had dual residency during the relevant period — though that scenario is unusual and would require careful review of both settlements’ eligibility definitions.
What Happens Next for 23andMe and Affected Customers?
The 23andMe case is likely to remain in the news for months as the bankruptcy proceedings continue and the company attempts to restructure or sell its assets under the Chrome name. For claimants, the immediate priority is confirming that your filed claim was received and accepted — log into the settlement portal at 23andmedatasettlement.com to check your claim status if you submitted before the deadline.
Looking ahead, the data privacy implications of this case extend beyond the settlement itself. 23andMe holds genetic data on millions of Americans, and the bankruptcy raises unresolved questions about what happens to that data if the company is sold, merged, or liquidated. Regulators and privacy advocates have flagged this as a concern, and it is worth monitoring how the company’s restructuring affects the data it holds — particularly for anyone who has not already deleted their 23andMe account and requested deletion of their DNA data.
Frequently Asked Questions
Can I still file a claim after February 17, 2026?
The standard deadline has passed. The only remaining open window applies to customers who received their breach notification on January 5, 2026, who have until March 1, 2026 to file. If you do not fall into that group, you are no longer able to file a cash claim, but you can still enroll in the free five-year monitoring service.
How do I know which compensation tier I qualify for?
Your tier depends on the type of data accessed. If 23andMe’s notification to you specifically mentioned that genetic health information was accessed, you may qualify for the Health Information tier of up to $165. If you have documented out-of-pocket losses from identity theft or fraud caused by the breach, you may qualify for the Extraordinary Claims tier of up to $10,000. Residents of certain states qualify for the $100 Statutory Cash tier based on state privacy laws.
Will 23andMe’s bankruptcy reduce how much I get paid?
The settlement fund is negotiated as part of the bankruptcy proceedings and is theoretically set aside for claimants. However, if the total value of valid claims or administrative costs exceeds projections, or if appeals delay the process, there is some uncertainty about timing and the final per-claimant amounts. The court has approved the fund, but bankruptcy adds procedural complexity.
What is the free monitoring benefit and how do I get it?
Eligible customers can receive five years of Privacy & Medical Shield plus Genetic Monitoring at no cost. This benefit does not require you to have filed a cash claim and is available even to those who missed the filing deadline. Enrollment information is available through the official settlement site.
What happened to 23andMe after the breach?
23andMe filed for Chapter 11 bankruptcy in March 2025 and is currently operating under the name Chrome. The company continues to hold genetic data on millions of customers, which has raised concerns among privacy advocates about what happens to that data if the company is sold or liquidated as part of the bankruptcy process.
Is there a separate settlement for Canadian customers?
Yes. A Canadian settlement of $3.25 million covering more than 300,000 Canadian customers was approved by a Canadian court in early February 2026. Canadian claimants should consult the Canadian settlement administrator separately, as the U.S. settlement terms and deadlines do not apply to them.
Get the latest 23andMe settlement updates on OpenClassActions.com.
You Might Also Like
- SiriusXM Settlement Update: Key Dates, Eligibility, And Next Steps
- Capital Health Settlement Update: Key Dates, Eligibility, And Next Steps
- SiriusXM Settlement FAQs: Eligibility, Deadlines, And Payment Timing