23andMe Class Action Lawsuit Payout 2026, $30 Million Settlement Pays Up To $10,000—File Claims By February 17

The 23andMe data breach class action lawsuit settled for $30 million after a federal court approved the agreement on January 20, 2026. Eligible customers can file claims for cash payments up to $10,000, health information payments up to $165, or state-specific statutory payments around $100, with the claim deadline set for February 17, 2026.

Over 6.4 million US residents had their personal and genetic information exposed in an October 2023 cyberattack. The settlement received final approval despite 23andMe filing for bankruptcy in March 2025 and changing its name to Chrome.

What Happened In The 23andMe Data Breach

On October 3, 2023, hackers used credential stuffing tactics to access 23andMe customer accounts. Attackers used stolen usernames and passwords from other websites to break into 23andMe profiles.

The cyberattack exposed sensitive information of approximately 6.4 million United States residents who used the genetic testing service between May 1 and October 1, 2023. Compromised data included names, genetic data, ancestry information, health predisposition reports, and raw genotype data.

In October 2024, over 40 class action lawsuits were consolidated in federal court. Plaintiffs accused 23andMe of negligence, breach of implied contract, and failing to protect customer data or promptly notify users about the attack.

Similar genetic privacy breaches demonstrate growing risks to sensitive health data, just like cases involving the AT&T Class Action Lawsuit Sending $7,500 Settlement Checks After Two Massive Data Breaches Exposed 73 Million Customers’ Most Sensitive Info.

Who Qualifies For The 23andMe Settlement

You qualify if you were a 23andMe customer at any time between May 1, 2023 through October 1, 2023, resided in the United States during this period, and received notice from 23andMe that your personal information was compromised.

The settlement covers all US residents, including those in Washington D.C., Puerto Rico, and all US territories. A special statutory subclass includes residents of Alaska, California, Illinois, or Oregon who qualify for additional payments under state genetic privacy laws.

Check your email or mail for the official 23andMe data breach notification letter. This letter confirms your eligibility and contains important claim information.

How Much Money You Can Receive

The settlement provides three types of cash compensation depending on your situation. Extraordinary claims reimburse up to $10,000 for documented, unreimbursed costs tied directly to the breach, including identity theft expenses, security systems you purchased, and mental health costs related to the breach.

If you received notice that your health information was affected, you can claim a one-time cash payment of up to $165. Your health information was compromised if the notice stated that your uninterpreted raw genotype data, certain health reports derived from genetic information, or self-reported health condition information was accessed.

Residents of Alaska, California, Illinois, or Oregon receive statutory cash claim payments estimated at $100 due to state genetic privacy laws providing for statutory damages. You must confirm your residency in these states during May 1, 2023 through October 1, 2023 to receive this payment.

Healthcare data breach settlements like the Signature Performance $8.5M Data Breach Settlement, Claim Up To $5,000 By May 7, 2026 follow similar compensation structures with documented loss reimbursements.

Critical February 17 Deadline

Claims must be submitted online by 11:59 p.m. Central Time on February 17, 2026, or mailed with postmark by February 17, 2026. Missing this deadline forfeits your right to compensation.

23andMe could end up owing as much as $50 million total, though much of that will go toward attorney fees. Payment to individual class members is tiered depending on their status and documentation.

For extraordinary claims, you need reasonable documentation such as credit card statements, bank statements, invoices, receipts, or police reports showing unreimbursed costs. Health information and statutory claims rely on verification of residency and receipt of breach notice.

Common Mistakes When Filing Claims

Many 23andMe customers assume they need to prove identity theft occurred to file a claim. That’s wrong. You only need proof that your data was exposed in the breach, which your notification letter provides.

Don’t throw away your breach notification letter. This letter serves as proof you’re part of the settlement class and may contain your unique claim ID needed to file online.

If you suffered documented losses, gather all receipts now. Credit monitoring fees, identity theft insurance premiums, legal or accounting fees to resolve fraud, and unreimbursed fraudulent charges all qualify for reimbursement up to $10,000.

How To File Your 23andMe Settlement Claim

Visit www.23andMeDataSettlement.com and complete the online claim form. You can also download a claim form from the settlement website to print and mail to 23andMe, c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391.

For questions about the settlement, email [email protected] or call (833) 621-5792.

Upload copies of receipts and documentation proving your out-of-pocket expenses for extraordinary claims. For health information and statutory claims, you’ll need to attest to your eligibility and provide your residential address.

Current Settlement Status As Of February 2026

The settlement received final court approval on January 30, 2026, after the preliminary approval hearing on January 20, 2026. Payment distribution will begin approximately 60-90 days after final approval, assuming no appeals are filed.

23andMe filed for Chapter 11 bankruptcy in March 2025. In July 2025, the TTAM Research Institute, a nonprofit led by 23andMe co-founder Anne Wojcicki, completed its purchase of company assets, including customer data.

The bankruptcy proceedings complicated settlement approval but did not prevent the final agreement. Customers affected by similar genetic data breaches should review cases like the $4M Numotion Data Breach Data Breach Class Action Settlement Claim Up To $15,000 By March 18, 2026 for comparison.

Last Updated: January 30, 2026
Disclaimer: This article provides general information only and does not constitute legal advice.
Need Help? Contact the settlement administrator at 833-621-5792 with questions about your claim.

Stay informed, stay protected. — AllAboutLawyer.com

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah