23andMe $30 Million Data Breach Settlement Receives Final Approval

The $30 million 23andMe data breach settlement has received final court approval, and the window to file a claim closed on February 17, 2026. If you missed the deadline, here is what happened and what options may still be available to you.

View the full 23andMe data breach settlement details and check your eligibility.

Status: Final Approval Granted | Claim Deadline: February 17, 2026 (Closed)


What Was This Case About?

In October 2023, 23andMe disclosed that hackers had accessed the accounts of millions of users, exposing sensitive personal information including genetic ancestry data, health predisposition reports, and basic profile details like names and birth years. The breach affected roughly 6.4 million customers in the United States.

The class action alleged that 23andMe failed to adequately protect customer data and was too slow in notifying people about the breach. The company agreed to the $30 million settlement without admitting liability. A federal judge granted final approval on January 30, 2026.

Who Was Eligible?

The settlement covered U.S. residents who had active 23andMe accounts between May 1 and October 1, 2023, and who received a breach notification letter from the company. Eligibility depended on what type of data was compromised:

  • Up to $10,000 for people who could document significant out-of-pocket costs directly caused by the breach — things like expenses from identity theft, credit monitoring services purchased before the settlement, or mental health treatment
  • Up to $165 for people whose genetic data or health reports were accessed
  • Approximately $100 for residents of Alaska, California, Illinois, or Oregon, who had additional claims under their state privacy laws

Why This Case Matters

The 23andMe breach was significant not just for its size but for the type of data involved. Unlike a credit card number that can be changed, genetic information is permanent. Once it is exposed, there is no way to undo that exposure. This case set an important precedent for how courts and companies handle breaches involving biometric and genetic data.

The settlement also came during a turbulent period for 23andMe as a company. The firm filed for bankruptcy protection and has faced ongoing questions about what happens to the genetic data of millions of customers if the company is sold or dissolved.

What If You Missed the Deadline?

If you were affected by the breach but did not file a claim by the February 17, 2026 deadline, you will not receive a payment from this settlement. However, you should still take steps to protect yourself:

  • Monitor your credit reports regularly for any signs of unauthorized activity
  • Consider placing a credit freeze with all three major credit bureaus (Equifax, Experian, TransUnion) — this is free and prevents new accounts from being opened in your name
  • Review your 23andMe account settings and consider downloading your data and deleting your account if you no longer use the service
  • Stay alert for phishing attempts that use your leaked personal information to appear legitimate

Case Details

Settlement Amount $30 million
People Affected Approximately 6.4 million U.S. customers
Final Approval January 30, 2026
Claim Deadline February 17, 2026 (closed)
Settlement Website 23andMeDataSettlement.com

By Steve Levine | Published: February 17, 2026

Filing Class Action Settlement Claims

Please submit only truthful information. False claims can be rejected and may carry penalties. If you are unsure whether you qualify, review the official notice or contact the settlement administrator. OpenClassActions.org is a consumer news site and is not a settlement administrator or a law firm.