23andMe Class Action Lawsuit, How To Join And Sign Up Online Before February 17, 2026 Deadline

You don’t need to “join” or “sign up” for the 23andMe class action lawsuit—if you received a data breach notification from 23andMe, you’re automatically included in the settlement class. The only action required is filing a claim by February 17, 2026, at 23andMeDataSettlement.com to receive your share of the $50 million settlement. Here’s exactly how the process works and what you need to know.

The 23andMe data breach affected approximately 6.4 million U.S. customers who were users between May 1 and October 1, 2023, and whose personal information was compromised in a massive cyberattack announced by the company on October 6, 2023.

Understanding How Class Action Lawsuits Work

Unlike individual lawsuits where you must hire an attorney and file paperwork to participate, class action lawsuits automatically include everyone who meets specific criteria. You’re already part of the settlement class if you received a breach notification from 23andMe stating your personal information was compromised.

The settlement class covers all U.S. residents who were 23andMe customers during the breach window and received official notice that their data was accessed by hackers. No signup, registration, or enrollment is necessary to be included.

What “Automatic Inclusion” Means

When 23andMe announced the breach, they sent notifications to affected customers. If you received that notification, you became a settlement class member automatically. You don’t need to take any action to “join” the lawsuit—class counsel already represents your interests.

However, being included in the class and actually receiving compensation are two different things. To get money from the settlement, you must file a claim.

How To File Your Claim Online

Filing your claim is simple and takes about 10 minutes. Visit 23andMeDataSettlement.com and complete the online claim form by 11:59 PM Central Time on February 17, 2026.

You’ll need your unique ID and PIN from the settlement notice 23andMe sent you. If you can’t find your notice or didn’t receive one but believe you’re affected, contact the settlement administrator at the phone number on the settlement website.

Required Information

The claim form asks for your name, address, email, and phone number. You’ll confirm you were a 23andMe customer during the breach period and that you received breach notification.

If you’re claiming documented losses up to $10,000, you’ll need to upload receipts, invoices, bank statements, or other proof showing expenses directly related to the data breach—such as identity theft protection costs, credit monitoring fees, bank fees for fraudulent transactions, or legal costs addressing identity theft.

If you’re claiming a health information payment, verify that 23andMe specifically notified you that your genetic data, health reports, or self-reported health information was accessed.

Alternative Filing Methods

If you prefer not to file online, download the claim form from the settlement website, complete it, and mail it postmarked by February 17, 2026, to: 23andMe Data Settlement, c/o Kroll Settlement Administration, P.O. Box 5324, New York, NY 10150-5324.

Mail submissions must be postmarked by the deadline, not received by that date. Keep a copy for your records and consider sending via certified mail for proof of submission.

What You Can Claim

Settlement class members have multiple compensation options. You can claim up to $10,000 with documented proof of extraordinary out-of-pocket losses caused by the breach, including identity theft costs, credit monitoring expenses, bank fees, and legal fees.

If 23andMe notified you that your genetic data or health information was accessed, you’re eligible for a health information claim payment. The exact amount depends on total claims filed, with early estimates around $165 per person.

Residents of Alaska, California, Illinois, or Oregon may receive additional statutory damages under state genetic privacy laws. All settlement class members can also enroll in three years of free privacy and medical monitoring through CyEx, regardless of whether they file a cash claim.

Critical Deadlines

February 17, 2026, is the absolute deadline to submit your claim form. Claims filed or postmarked after this date will be rejected with no exceptions. Courts rarely grant deadline extensions, even for compelling reasons.

The final approval hearing is scheduled for January 20, 2026. If the court grants final approval and no appeals delay the process, settlement payments will be distributed approximately 60-90 days later, likely spring 2026.

Why This Settlement Exists

The consolidated class action lawsuit accused 23andMe of failing to protect sensitive genetic data with adequate security measures and not requiring two-factor authentication until after the breach. Hackers used a technique called “credential stuffing” to access approximately 14,000 accounts directly, then exploited 23andMe’s DNA Relatives feature to access data on millions of additional users.

The breach exposed names, birth years, genetic ancestry results, and health predisposition reports. Hackers specifically targeted and advertised datasets about Ashkenazi Jewish and Chinese ancestry users on dark web forums.

23andMe filed for Chapter 11 bankruptcy in March 2025. In July 2025, a nonprofit led by former CEO Anne Wojcicki purchased the company for $305 million, which freed up funds to increase the settlement from the original $30 million to $50 million.

The settlement represents essentially all available funds—$25 million from cyber insurance and remaining company assets. 23andMe denies all wrongdoing, and no court determined the company violated any laws.

Similar Data Breach Settlements

This 23andMe data breach settlement follows a pattern of major companies paying substantial sums to resolve security failure claims. The AT&T class action lawsuit resulted in $177 million for 73 million customers affected by two 2024 breaches.

The Nelnet data breach class action lawsuit offers $10 million to 2.5 million student loan borrowers whose data was exposed in 2022. Similar cases demonstrate that timely claim filing is essential to receive compensation.

What Happens If You Don’t File

If you take no action, you remain bound by the settlement and give up your right to sue 23andMe separately over the data breach. You won’t receive any cash payment, though you can still enroll in the free privacy monitoring program if you act before it’s no longer available.

Missing the deadline means forfeiting your compensation permanently. There are no second chances or extensions.

Last Updated: January 20, 2026

Disclaimer: This article provides informational content about the 23andMe class action lawsuit settlement and should not be considered legal advice.

Call to Action: Were you affected by the 23andMe data breach? Share your experience in the comments and help other users understand what to expect from the claims process.

Stay informed, stay protected. — AllAboutLawyer.com

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah