California Settlement with 23andMe Successor Over Data Breach

The settlement involves Chrome Holding Co., the successor to 23andMe Holding Co., and California Attorney General Rob Bonta. The agreement is intended to resolve California's allegations that the genetic testing company did not safeguard the personal and genetic data of its customers following a data breach that took place in 2023.

The claims centered on the company's failure to protect customer information, which was exposed during the 2023 breach. The lawsuit sought relief under California's consumer protection and privacy laws. The settlement also addresses California's challenge to the sale of customer genetic data during 23andMe's bankruptcy.

Under the terms, Chrome Holding will pay approximately $6.01 million to the California Attorney General's Office, which will use the funds to provide relief to about 855,000 affected residents. The agreement also mandates that the bankrupt company cannot sell directly to consumers or retain personally identifiable information for five years, while preserving consumers' rights to data deletion and sample destruction.