23andMe $50M Class Action Lawsuit Settlement, How to Claim Your Share Before February 17, 2026 Deadline
If you were a 23andMe customer between May 1 and October 1, 2023, and received a data breach notification, you can claim up to $10,000 from a $50 million settlement. The deadline to file is February 17, 2026. Here’s everything you need to know about claiming your compensation right now.
How to Claim Your 23andMe Settlement Money
⏰ CLAIM DEADLINE: February 17, 2026 at 11:59 PM CT
🌐 OFFICIAL WEBSITE: 23andMeDataSettlement.com
📞 PHONE: (833) 621-5792
You have two ways to submit your claim:
Online: Go to 23andMeDataSettlement.com and fill out the claim form by 11:59 PM Central Time on February 17, 2026
By Mail: Download the claim form, fill it out, and mail it postmarked by February 17, 2026 to: 23andMe Data Settlement c/o Kroll Settlement Administration P.O. Box 5324 New York, NY 10150-5324
What You Can Claim
Up to $10,000 if you have documented proof of extraordinary out-of-pocket losses caused by the data breach (identity theft costs, credit monitoring, bank fees, legal fees, etc.)
Health Information Claims if 23andMe notified you that your genetic data, health reports, or self-reported health information was accessed
3 Years of Free Monitoring through CyEx’s Privacy & Medical Shield + Genetic Monitoring program (dark web monitoring, identity theft protection, genetic anomaly detection)
Who Can File a Claim?
You’re eligible if all three conditions apply:
✅ You were a 23andMe customer anytime between May 1, 2023 and October 1, 2023
✅ You lived in the United States during that time
✅ You received a notice from 23andMe saying your personal information was compromised in the data breach
About 6.4 million U.S. residents qualify for this settlement.
What Happened in the 23andMe Data Breach?
In October 2023, 23andMe revealed hackers had broken into customer accounts for five months starting in April 2023. The attackers used a method called credential stuffing—they tried usernames and passwords stolen from other website breaches to see if 23andMe customers reused the same passwords.
It worked. Thousands of accounts were compromised.
But it got worse. The hackers didn’t just steal data from the accounts they accessed directly. They exploited 23andMe’s DNA Relatives feature, which lets users connect with genetic relatives. Through this feature, they grabbed profile information from 5.5 million additional users plus family tree data from another 1.4 million people.
The stolen information included:
- Raw genetic data
- Health predisposition reports
- Wellness reports
- Carrier status reports
- Ancestry information
- Self-reported health conditions
- Names, birth years, locations
- Profile photos
Then the hackers did something particularly disturbing. They compiled datasets specifically targeting people with Ashkenazi Jewish and Chinese ancestry and put them up for sale on the dark web.
Lawyers representing affected customers argued these lists could be used as “hit lists” to target Jewish people or allow Chinese intelligence agencies to track dissidents.
The Lawsuit: What 23andMe Was Accused Of
More than 40 lawsuits were filed against 23andMe after the breach. The cases were consolidated into one massive class action in Northern District of California federal court in April 2024.
The plaintiffs made serious accusations:
Inadequate Security: 23andMe didn’t require multi-factor authentication (MFA) to protect accounts, even though this basic security measure could have prevented the credential stuffing attack
Lying About Security: The company allegedly misled customers about how secure their genetic data was
Slow Response: 23andMe took too long to notify customers about the breach and downplayed its severity
Failure to Warn High-Risk Users: The company didn’t specifically warn customers with Jewish or Chinese heritage that hackers were targeting and selling datasets about them
Breaking Privacy Laws: The lawsuits cited violations of genetic privacy laws in California, Alaska, Oregon, and Illinois, which have special protections for genetic information
23andMe has denied all wrongdoing. No court has determined the company violated any laws. The settlement isn’t an admission of guilt—it’s an agreement to end the litigation.
Why the Settlement Jumped from $30 Million to $50 Million
The parties originally agreed to a $30 million settlement in September 2024. A federal judge gave it preliminary approval in December 2024.
Then things got complicated.
In March 2025, 23andMe filed for Chapter 11 bankruptcy protection. The company was struggling financially even before the breach, and the lawsuits made things worse.
But the bankruptcy actually helped affected customers. In July 2025, a nonprofit led by former 23andMe CEO Anne Wojcicki purchased the company for $305 million. The sale freed up additional money to pay breach victims.
After the original settlement was proposed, over 250,000 people filed valid claims with documentation of their losses. The company realized $30 million wouldn’t be enough. So they asked the bankruptcy court to approve an increased settlement of $50 million.
According to 23andMe’s attorneys, the proceeds from selling the company are the only source of money to compensate victims. The $50 million represents essentially everything available—$25 million comes from cyber insurance, and only $5 million from remaining company assets.
The case was transferred to U.S. Bankruptcy Court for the Eastern District of Missouri, where Judge Brian C. Walsh is overseeing both the bankruptcy and the settlement.
Settlement Timeline: Key Dates You Need to Know
October 6, 2023: 23andMe announces the data breach
April 2024: Lawsuits consolidated into multidistrict litigation
September 2024: Initial $30 million settlement agreed upon
December 2024: Federal court gives preliminary approval to $30 million settlement
March 2025: 23andMe files for Chapter 11 bankruptcy
July 2025: Nonprofit led by Anne Wojcicki purchases 23andMe for $305 million
September 2025: Settlement increased to $50 million
October 2, 2025: Bankruptcy court grants preliminary approval of $50 million settlement, appoints Kroll as settlement administrator
November 2025: Settlement notice sent to class members; claim period begins
December 29, 2025: Deadline to opt out or object to settlement
January 20, 2026: Final approval hearing scheduled
February 17, 2026: Claim deadline
Mid to Late 2026: Expected payment distribution (after final approval and appeals resolved)
What Types of Claims Can You File?
The settlement offers several categories of compensation:
1. Extraordinary Out-of-Pocket Losses (Up to $10,000)
If you spent money directly because of the data breach, you can get reimbursed up to $10,000. This includes:
- Credit monitoring services you purchased
- Identity theft protection costs
- Bank fees from fraudulent transactions
- Legal fees
- Lost wages from dealing with identity theft
- Other documented expenses
You need receipts, invoices, bank statements, or other proof of these expenses.
2. Health Information Claims
If 23andMe told you in their breach notification that your health information was accessed, you’re eligible for this payment. Health information includes:
- Raw genetic data
- Health predisposition reports
- Wellness reports
- Carrier status reports
- Self-reported health conditions
The exact payment amount isn’t specified and will depend on how many people file claims.
3. Privacy & Medical Shield Monitoring (3 Years)
All settlement class members can sign up for three years of free monitoring through CyEx. This specialized program was created specifically for 23andMe breach victims and includes:
- Dark web monitoring to see if your data appears for sale
- Identity theft monitoring
- Genetic anomaly detection
- Credit monitoring
- Fraud resolution services
This is separate from your cash payment—you get this even if you don’t file a claim for money.
Do You Need a Lawyer?
No. You don’t need an attorney to participate in the settlement or file a claim.
The process is designed for individuals to handle themselves. The settlement website has instructions, and the claim form walks you through what information you need.
However, if you’re considering opting out to pursue your own lawsuit, you should consult with an attorney first. Most consumer attorneys offer free consultations.
The lawyers representing the class will receive up to 25% of the settlement fund (about $12.5 million) plus up to $500,000 in expenses. This comes out of the $50 million total, not from your individual payment.
What If You Want to Opt Out?
Opt-out deadline: December 29, 2025 (This deadline has passed as of January 2026)
If you opted out by the deadline, you won’t get any settlement money but you keep the right to sue 23andMe on your own.
Most consumer attorneys recommend staying in the class action unless you have extraordinary damages that justify the time and expense of individual litigation. Remember, 23andMe is now a restructured company with limited assets, so winning a big individual judgment might not mean much if there’s no money to collect.
What If You Object to the Settlement?
Objection deadline: December 29, 2025 (This deadline has passed as of January 2026)
If you thought the settlement wasn’t fair, you could have filed an objection explaining why. The court considers objections when deciding whether to grant final approval.
Even if you objected, you would still receive settlement benefits if the court approves the deal.
When Will You Get Paid?
The court scheduled the final approval hearing for January 20, 2026. Judge Walsh will decide whether to approve the settlement at that hearing.
If approved, there’s still a waiting period. Anyone can appeal the court’s decision. Plus, the bankruptcy process needs to wrap up.
According to the settlement administrator, payments are expected to go out in mid to late 2026.
The exact amount each person receives depends on:
- How many valid claims are filed
- What type of claim you file
- How much documentation you provide
- The total settlement fund available after legal fees and administrative costs
If you have documented losses up to $10,000, you’re more likely to receive the full amount you’re claiming. But if hundreds of thousands of people file claims, the settlement fund will be divided among everyone, potentially reducing individual payments.
What Evidence Should You Preserve?
If you experienced identity theft or fraud you believe is connected to the 23andMe breach, save everything:
Financial Records: Bank statements showing unauthorized transactions, credit card statements with suspicious charges, credit reports showing fraudulent accounts
Communications: Emails from 23andMe about the breach, notifications from credit bureaus, correspondence with banks or credit card companies about fraud
Receipts: Proof of payment for credit monitoring, identity theft services, legal consultations, notary fees, mailing costs
Time Records: Log of hours spent dealing with identity theft, including calls to banks, filing police reports, disputing fraudulent charges
Medical Records: If you experienced stress, anxiety, or other health impacts from the breach (though these may be harder to tie directly to the data breach)
Even if you’re not sure something is related, keep it. You can always decide later not to include it in your claim.
What About Canadian Residents?
There’s a separate settlement for Canadian customers.
In December 2025, 23andMe reached a $3.25 million Canadian dollar settlement (about $4.49 million CAD) for approximately 300,000 Canadian residents affected by the breach.
The U.S. Bankruptcy Court will hear the application for final approval of the Canadian settlement on February 17, 2026. After that, Canadian courts must also approve it.
If you’re a Canadian resident, check with the law firm KND Complex Litigation for details on how to participate in the Canadian settlement.
How This Compares to Other Data Breach Settlements
The 23andMe settlement is unique because of the type of data stolen.
Most data breaches involve credit card numbers, Social Security numbers, or addresses—information that can be changed or monitored. Genetic data is different. You can’t change your DNA. Once it’s out there, it’s compromised forever.
This is why genetic privacy advocates consider the 23andMe breach especially serious.
For comparison:
Equifax (2017): $425 million settlement for 147 million people. Victims could claim up to $20,000 for documented losses or $125 if they already had credit monitoring.
T-Mobile (2021): $350 million settlement for 76.6 million people. Victims received about $25 each on average.
Marriott (2020): $52 million settlement for 131 million people affected by three separate breaches.
The 23andMe settlement of $50 million for 6.4 million people works out to about $7.81 per person on average—but actual payments will vary dramatically based on whether you have documented losses.
What 23andMe Has Agreed to Do Going Forward
The settlement requires 23andMe to implement specific security improvements:
Multi-Factor Authentication: Now mandatory for all accounts
Enhanced Password Protection: Stricter requirements and enforcement
Security Awareness Training: Annual training for all employees
Cybersecurity Audits: Regular third-party security assessments
Data Retention Limits: Restrictions on keeping inactive users’ personal information
Incident Response Plan: Improved protocols for detecting and responding to breaches
These requirements are part of the settlement and enforceable by the court. If 23andMe fails to maintain these protections, the company could face additional legal consequences.
Beware of Scams
With any large settlement, scammers come out looking to take advantage of eligible claimants.
The ONLY official website is: 23andMeDataSettlement.com
The ONLY official phone number is: (833) 621-5792
The ONLY official email is: [email protected]
Red flags that indicate a scam:
❌ Someone asks you to pay money to claim your settlement ❌ You receive a call or email asking for your Social Security number, bank account, or credit card ❌ The website URL doesn’t exactly match 23andMeDataSettlement.com ❌ Someone promises you a specific dollar amount before the claims process is complete ❌ You’re told you must act immediately or lose your right to claim
Legitimate settlements NEVER require you to pay fees upfront or provide sensitive financial information to submit a claim.
Frequently Asked Questions
Q: I used 23andMe years ago and closed my account. Am I still eligible?
A: Yes, if you were a customer between May 1 and October 1, 2023, even if your account was inactive or closed.
Q: I never got a breach notification from 23andMe. Can I still claim?
A: Only if you received notice from 23andMe that your information was compromised. Contact the settlement administrator at (833) 621-5792 to verify if you’re included.
Q: My DNA Relatives feature is how others accessed my data. Do I qualify?
A: Yes. If 23andMe sent you a breach notification saying your information was accessed through DNA Relatives, you’re in the settlement class.
Q: What if I can’t find all my receipts for documented losses?
A: Submit what you have. Include bank statements, credit card statements, or other records that show the expenses even if you don’t have the original receipts.
Q: Can multiple family members on one account each file a claim?
A: Yes. Each affected person can file their own claim, even if multiple people shared one account.
Q: I experienced identity theft. How do I prove it’s related to the 23andMe breach?
A: Document everything and explain the timeline in your claim. If the identity theft or fraud occurred after October 2023, that helps establish a connection.
Q: What if I miss the February 17, 2026 deadline?
A: There are no extensions. If you miss the deadline, you lose your right to settlement benefits. File as early as possible.
Q: How much will I actually receive?
A: It depends on how many people file claims and what types of claims they file. Those with documented extraordinary losses up to $10,000 have the best chance of receiving higher payments.
Q: Can I claim even if I have no out-of-pocket costs?
A: Yes. You can still receive a Health Information Claim payment if your genetic or health data was accessed, and you can sign up for the free 3-year monitoring program.
Q: I opted out by the December 29 deadline. Can I change my mind?
A: No. Once you opt out, you’re excluded from the settlement and cannot receive any benefits.
Q: Is 23andMe still operating?
A: Yes. The company was restructured through bankruptcy and purchased by a nonprofit. It continues to operate and process DNA tests.
What This Means for Your Privacy Going Forward
Even if you receive settlement money, your genetic data is still out there. There’s no way to take it back.
Here’s what you should consider:
Monitor Your Identity Closely: Sign up for the free 3-year monitoring through the settlement. After that expires, consider paid monitoring services.
Watch for Targeted Scams: If your ancestry or heritage was in one of the targeted datasets, be extra cautious about phishing attempts or identity theft.
Freeze Your Credit: Consider freezing your credit with all three bureaus (Equifax, Experian, TransUnion) to prevent fraudulent accounts.
Change Passwords Everywhere: If you reused your 23andMe password on other sites, change those passwords immediately. Use unique passwords for every account.
Enable MFA Everywhere: Turn on multi-factor authentication for every account that offers it.
Be Skeptical of Health-Related Contacts: Be wary of anyone contacting you with offers related to your genetic health information.
The reality is that genetic data breaches create permanent privacy risks. Unlike a stolen credit card, you can’t just get a new DNA sequence.
Final Thoughts: Don’t Miss Your Chance to Claim
The February 17, 2026 deadline is firm. Courts don’t grant extensions for class action settlement claims.
If you were a 23andMe customer between May and October 2023, go to 23andMeDataSettlement.com today and file your claim. It takes about 10-15 minutes to complete the online form.
Even if you don’t have documented losses to claim, file anyway. You’ll be eligible for the Health Information Claim payment and the free monitoring program.
This settlement represents years of litigation and is likely the only compensation you’ll receive for having your most personal information—your genetic code—stolen and sold on the dark web.
Don’t let the deadline pass. File your claim now.
CLAIM NOW: Visit 23andMeDataSettlement.com or call (833) 621-5792
DEADLINE: February 17, 2026 at 11:59 PM CT
This article provides information about the 23andMe data breach settlement but does not constitute legal advice. For specific questions about your situation, consult with an attorney.
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah