If you were affected by 23andMe’s data breach that compromised 14,000 user accounts—plus 6.9 million DNA Relatives and Family Tree profiles—you can now claim your compensation.
Following the 2023 credential-stuffing attack, 23AndMe in 2024 agreed to a $30 million payout for impacted consumers. The genetic testing company then filed for Chapter 11 bankruptcy earlier this year (introducing new privacy concerns around the potential sale of customer data), and the settlement money will soon be distributed amid the proceedings.
How much you’ll receive from 23andMe
If everyone whose account was involved received an equal payout, that would come to about $4.35 per person. However, users with an “extraordinary claim”—those who experienced identity theft or fraudulent tax filings as a result of the breach—could qualify for up to $10,000 to reimburse verified expenses, including costs for physical or cyber security systems as well as mental health treatment.
Individuals residing in Alaska, California, Illinois, and Oregon will receive roughly $100 thanks to state privacy laws, and this same amount will likely be paid to users whose personal health information was leaked.
The settlement also provided for three years of identity monitoring services through a customized program called Privacy & Medical Shield + Genetic Monitoring.
How to file a 23andMe claim
There are actually two types of claims permitted as part of 23andMe’s bankruptcy filing. Consumers who were impacted by the 2023 data breach can file a Cyber Security Incident Claim, which must be submitted by July 14, 2025. To be eligible, you must have been a 23andMe customer between May 1, 2023 and October 1, 2023 and have received a notice (via letter or email) that your information was compromised in the breach. You also must attest that you incurred damages (monetary or non-monetary) as a result of the incident.
Claims can be filed online via the Kroll Restructuring Administration portal, or you can mail a hard copy of your claim form to the address listed. To complete a claim, you must provide some personal information as well as details about the harm incurred with supporting documentation, such as bank or credit card statements substantiating losses.
If you weren’t affected by the breach but have other grievances with 23andMe, you can submit a general claim form using the same process with the same deadline.
