California Sues 23andMe Over Data Breach

United States — California>>> Attorney General Rob Bonta>>> has filed a lawsuit against Chrome Holding Company>>>, formerly known as 23andMe>>>, over a 2023 data breach that exposed the genetic and personal information of approximately 6.9 million U.S. customers. The complaint alleges that 23andMe>>> ignored warnings, failed to implement adequate security measures, and misled consumers about the severity of the breach. The attack utilized 'credential stuffing,' exploiting credentials stolen from other incidents, including one involving MyHeritage>>>. The lawsuit seeks civil penalties and injunctions against further privacy violations. This action follows 23andMe>>>'s bankruptcy filing in March 2025 and the subsequent acquisition of its assets by TTAM Research Institute, a nonprofit controlled by co-founder Anne Wojcicki>>>. A previous class-action settlement for the breach was approved for $50 million.