Case Overview
On August 11, 2023, a cybercriminal posted to an online forum advertising a stolen data set of personal information belonging to 23andMe users. In early October 2023, 23andMe user data appeared for sale on a second cybercrime forum. Upon investigation, 23andMe learned that a subset of the personally identifiable information (PII) data in its possession had been accessed by unauthorized individuals and the compromised data contained names, genders, dates of birth, ancestors’ birth locations and family names, family tree information, profile pictures, geographic locations, and genetic information such as maternal and paternal haplogroup results and predicted relationships with genetic matches. 23andMe has admitted this breach compromised the highly sensitive personal information of approximately 7 million users.
Keller Rohrback L.L.P. partner Cari Campen Laufenberg was appointed to serve as Co-Lead Counsel in this litigation involving a data breach announced by 23andMe on October 6, 2023.
On April 11, 2024, our action and other related actions were consolidated in the United States District Court for the Northern District of California and are proceeding before The Honorable Edward M. Chen. Plaintiffs filed a Consolidated Class Action Complaint on June 26, 2024, and a motion for preliminary approval of proposed class action settlement on September 12, 2024. 23andMe subsequently filed for bankruptcy on March 23, 2025 in the Eastern District of Missouri.
On September 4, 2025, Plaintiffs and Debtors filed a joint motion for preliminary approval of a settlement in the bankruptcy proceedings. On October 2, 2025, U.S. Bankruptcy Judge Brian C. Walsh issued an Order granting preliminary approval of the proposed settlement, appointing Kroll as the Settlement Administrator, and setting a final approval hearing for January 20, 2026, at 10:00am Central Time.
Protecting Your Private Information
The Federal Trade Commission’s website provides resources and information regarding steps to take if you’ve been exposed to a data breach.
For copies of case hearing transcripts, please visit https://www.23andmedatabreach.com/.
