To file a claim in the 23andMe Customer Data Security Breach Settlement, visit 23andMeDataSettlement.com and submit your information online, or mail a completed claim form to the Claims Processing Center c/o Kroll Restructuring Administration LLC, Grand Central Station, PO Box 4850, New York, NY 10163-4850. The primary filing deadline of February 17, 2026 has just passed, but an extended deadline of March 1, 2026 applies to individuals who first received settlement notice on January 5, 2026. For example, if you were a 23andMe customer who got a late notification about the breach and your compromised data, you may still have time to act under that extended window. This $30 million settlement resolves more than 40 class action lawsuits stemming from the October 2023 cyberattack that compromised the personal information of approximately 6.4 million U.S.
Residents. The case has taken several complicated turns, including 23andMe’s bankruptcy filing in March 2025 and the subsequent sale of its assets to TTAM Research Institute, completed on July 14, 2025. The U.S. Bankruptcy Court for the Eastern District of Missouri granted final approval of the settlement on January 20, 2026.
Table of Contents
- Who Is Eligible to File a Claim in the 23andMe Data Breach Settlement?
- What Types of Compensation Can You Claim and What Are the Limits?
- How 23andMe’s Bankruptcy Affects Your Settlement Payment
- Filing Online Versus Filing by Mail — Which Method to Choose
- Common Pitfalls That Could Reduce or Disqualify Your Claim
- What the Genetic Monitoring Benefit Actually Covers
- What Happens Next and When to Expect Payment
- Frequently Asked Questions
Who Is Eligible to File a Claim in the 23andMe Data Breach Settlement?
Eligibility for this settlement is limited to U.S. residents who were 23andme customers between May 1, 2023 and October 1, 2023, and who received notice from 23andMe that their personal information was compromised in the breach. This is not a situation where every person who ever used the service can file. You specifically need to have been notified by the company that your data was affected. If you had a 23andMe account but never received a breach notification, you likely do not qualify, and filing a claim without proper eligibility could delay the process for legitimate claimants.
One point worth clarifying: the breach window and the customer eligibility window are distinct concepts. You needed to be an active customer during that May through October 2023 period. Someone who deleted their account in 2022 or created one in November 2023 would fall outside the class definition. If you are unsure whether you received a notification, check your email archives, including spam folders, for messages from 23andMe referencing the data incident. The settlement administratorsettlement administrator[contact settlement administrator[contact via the official settlement website] to verify your eligibility status.
What Types of Compensation Can You Claim and What Are the Limits?
The settlement offers several categories of compensation, and understanding the differences matters because they require different levels of documentation and have significantly different payout caps. Extraordinary Claims allow up to $10,000 for documented, unreimbursed losses directly tied to the breach. This covers things like identity theft remediation costs, money spent on credit monitoring or security services you purchased because of the breach, and mental health expenses such as therapy related to the anxiety or distress caused by having your genetic data exposed. To collect on these claims, you need receipts, bank statements, police reports, or other documentation proving both the expense and its connection to the breach. Health Information Claims offer up to $165 for individuals whose health-related data was specifically compromised.
This is a separate category because genetic and health information carries unique sensitivity beyond typical personal data like names and email addresses. However, if your compromised data was limited to basic account information and did not include health or genetic details, you would not qualify for this tier. Additionally, residents of Alaska, California, Illinois, or Oregon during the breach period may be eligible for Statutory Cash Claims, estimated at roughly $100, based on state-specific data privacy laws. These states have stronger consumer data protection statutes that provide for statutory damages even without proof of specific harm. Beyond cash payments, all eligible class members are entitled to five years of “Privacy & Medical Shield + Genetic Monitoring.” This monitoring service is designed to address the uniquely sensitive nature of genetic data, which unlike a credit card number cannot simply be changed or reissued once exposed.
How 23andMe’s Bankruptcy Affects Your Settlement Payment
The elephant in the room with this settlement is timing. 23andMe filed for bankruptcy in March 2025, and while the $30 million settlement fund was established before the bankruptcy filing, payments will not be disbursed until the company’s bankruptcy reconciliation process is resolved. Court documents indicate this is expected to take “considerable time,” which is deliberately vague language that should temper expectations about receiving money quickly. The good news is that the settlement fund should be protected from general bankruptcy proceedings because it was set aside prior to the filing.
This means creditors in the bankruptcy case should not be able to raid the pool designated for data breach victims. The sale of 23andMe’s assets to TTAM Research Institute, completed on July 14, 2025, and the subsequent final approval of the settlement by the bankruptcy court on January 20, 2026, are positive signs that the process is moving forward. But claimants should understand that even after filing, there is no firm timeline for when checks will arrive. If you are deciding whether filing is worth the effort, consider that submitting a claim costs nothing beyond your time, and once the fund is distributed, you cannot go back and file retroactively.
Filing Online Versus Filing by Mail — Which Method to Choose
Filing online at 23andMeDataSettlement.com is the faster and more reliable method. The website walks you through the claim form step by step and allows you to upload supporting documentation directly. You also receive a confirmation that your submission was received, which provides a record in case any disputes arise later about whether you filed on time. For Extraordinary Claims requiring documentation of losses, the ability to attach digital copies of receipts, bank statements, or police reports makes the online process significantly more practical.
Filing by mail remains an option for those who prefer paper forms or lack reliable internet access. Claims should be mailed to the Claims Processing Center c/o Kroll Restructuring Administration LLC, Grand Central Station, PO Box 4850, New York, NY 10163-4850. The tradeoff is clear: mailed claims take longer to process, carry the risk of being lost in transit, and you have no immediate confirmation of receipt unless you send via certified mail. Given that the extended deadline is March 1, 2026 for late-notice recipients, anyone mailing a claim should do so immediately and use a trackable shipping method. A claim postmarked after the deadline will almost certainly be rejected regardless of when it arrives.
Common Pitfalls That Could Reduce or Disqualify Your Claim
The most frequent mistake claimants make with settlements like this is filing for Extraordinary Claims without adequate documentation. Stating that you suffered $5,000 in identity theft losses without attaching bank statements, fraud reports, or receipts for services purchased will result in your claim being reduced or denied for that category. The settlement administrator has discretion to evaluate documentation, and unsubstantiated claims are routinely rejected. If you did experience real financial harm from the breach, take the time to gather your evidence before submitting. Another pitfall involves the deadlines.
The opt-out and objection deadline was December 29, 2025, and that window is permanently closed. If you did not opt out by that date, you are bound by the settlement terms and cannot pursue an independent lawsuit against 23andMe for the same claims. For the filing deadline, the primary date of February 17, 2026 has passed. The only remaining path is the extended March 1, 2026 deadline, and that applies exclusively to individuals who first received settlement notice on January 5, 2026. If you received notice earlier and simply did not get around to filing, the extended deadline does not apply to you. Contact the settlement administratorsettlement administrator[contact via the official settlement website] to discuss your specific situation, but do not assume an extension will be granted.
What the Genetic Monitoring Benefit Actually Covers
The five-year “Privacy & Medical Shield + Genetic Monitoring” benefit is worth understanding because genetic data breaches are fundamentally different from typical financial data breaches. Your Social Security number can be changed. Your credit card can be reissued. Your DNA cannot.
The monitoring service is designed to watch for misuse of genetic and health information that was exposed in the breach, providing alerts if your data surfaces in contexts that suggest fraud or unauthorized use. For example, if someone attempted to use your genetic information to fraudulently obtain life insurance or manipulate medical records, the monitoring service is intended to flag that activity. Whether this monitoring proves practically useful depends on how the stolen data is exploited, which remains uncertain. But enrolling in the monitoring costs nothing additional to class members and provides a layer of protection that standard credit monitoring does not address.
What Happens Next and When to Expect Payment
Looking ahead, the key variable is how quickly the bankruptcy reconciliation process wraps up. The settlement fund exists and has court approval, but disbursement is tied to the resolution of 23andMe’s broader financial unwinding. Claimants should keep their contact information current with the settlement administrator, as outdated addresses or email accounts are one of the most common reasons people miss their payments when funds are finally distributed. The broader precedent set by this case is also worth watching.
A $30 million settlement for a genetic data breach, processed through bankruptcy court, is relatively novel territory. How the court handles the distribution, particularly the balance between Extraordinary Claims and the more routine Statutory and Health Information Claims, will likely influence how future genetic data breach cases are settled. For now, if you are eligible and have not yet filed, your only remaining option is the March 1, 2026 extended deadline for late-notice recipients. Act on it before that window closes.
Frequently Asked Questions
Has the deadline to file a claim in the 23andMe settlement already passed?
The primary deadline of February 17, 2026 has passed. However, an extended deadline of March 1, 2026 applies to individuals who first received settlement notice on January 5, 2026. If you received notice earlier and missed the primary deadline, contact the settlement administratorsettlement administrator[contact via the official settlement website] to discuss your options.
How much money will I receive from the 23andMe data breach settlement?
It depends on the type of claim you file. Statutory Cash Claims for residents of Alaska, California, Illinois, or Oregon are estimated at roughly $100. Health Information Claims pay up to $165 if your health data was specifically compromised. Extraordinary Claims can reach up to $10,000 but require documentation of actual financial losses tied to the breach.
Will the 23andMe bankruptcy prevent me from getting paid?
The $30 million settlement fund was established before 23andMe filed for bankruptcy, so it should be protected from general bankruptcy proceedings. However, payments will not be disbursed until the bankruptcy reconciliation process is resolved, and that is expected to take considerable time. There is no firm date for when checks will go out.
Do I need documentation to file a claim?
For Statutory Cash Claims and Health Information Claims, documentation requirements are minimal. For Extraordinary Claims of up to $10,000, you need to provide evidence such as receipts, bank statements, police reports, or other records proving your unreimbursed losses were connected to the breach. Claims without adequate documentation will likely be reduced or denied.
Can I still opt out of the settlement and sue 23andMe independently?
No. The opt-out deadline was December 29, 2025, and that window has permanently closed. If you did not opt out by that date, you are bound by the settlement terms and cannot file a separate lawsuit against 23andMe over the same claims covered by this settlement.
What is the genetic monitoring benefit and should I enroll?
All eligible class members can receive five years of “Privacy & Medical Shield + Genetic Monitoring,” which watches for misuse of your exposed genetic and health data. Since DNA cannot be changed like a credit card number, this monitoring addresses a risk that standard credit monitoring does not cover. There is no cost to enroll, so there is no downside to signing up.
File your 23andMe data breach settlement claim on OpenClassActions.com.
You Might Also Like
- 23andMe Approved Settlement Customer Data Security Breach Settlement: Who Qualifies
- How To File A Claim In The Capital Health Data Breach Settlement
- Everything To Know About The Capital Health Data Breach Settlement Before You Submit A Claim