23andMe Lawsuit 2026: Settlement Status, Payouts, and What Comes Next
Quick Answer
- The 23andMe lawsuit and settlement are real, filed in federal bankruptcy court and confirmed by a judge’s July 7, 2026 approval order.
- Payouts range from about $100 to $165 for most claimants, with up to $10,000 for documented extraordinary losses.
- The claim filing deadline was February 17, 2026, and has passed; no new claims are being accepted.
If you got a notice, an email, or saw a headline about 23andMe being sued, here is the direct answer: yes, the lawsuit is real, and a settlement covering the 2023 data breach is now moving toward payment. A bankruptcy judge in St. Louis approved the deal on July 7, 2026, months after the original claim window closed.
This affects an estimated 6.9 million people whose 23andMe accounts were exposed in a 2023 credential stuffing attack. The claim deadline was February 17, 2026, and it has already passed. If you filed on time, your check has not been cut yet.
This article covers where the case stands right now, what you can expect to get paid, and what to do if you missed the deadline. One detail most coverage skips: a separate $18 million settlement with 43 state attorneys general was announced just this month, and it pays state governments, not you directly.
The Facts
| Case | In re: Chrome Holding Co. (f/k/a 23andMe Holding Co.), Case No. 25-40976-357, U.S. Bankruptcy Court, E.D. Missouri |
| Status | Final approval granted July 7, 2026; claims window closed |
| Fund Size | $46.75 million (consumer class), plus a separate $18 million multistate settlement |
| Est. Per Person | About $100 to $165 for most claims; up to $10,000 for documented extraordinary losses |
| Claim Deadline | February 17, 2026 (passed) |
| Administrator | Kroll Settlement Administration LLC |
| Proof Needed | None for most claims; receipts or documentation required for extraordinary loss claims |
Is the 23andMe Lawsuit Real?
Yes, the 23andMe lawsuit is real. It’s a consolidated federal case that started as a multidistrict litigation in the Northern District of California and later moved into bankruptcy court in Missouri after the company filed for Chapter 11 in March 2025.
The case is formally titled In re: 23andMe, Inc. Customer Data Security Breach Litigation, originally MDL Case No. 24-md-03098-EMC. It’s now proceeding as In re: Chrome Holding Co., Case No. 25-40976-357, since 23andMe legally renamed itself Chrome Holding Co. after its assets were sold.
Roughly 40 separate lawsuits were filed against the company after it disclosed the breach in October 2023. Those cases were folded into one MDL, which is how large-scale consumer litigation like this typically works.
Key Takeaway: The 23andMe lawsuit is a genuine, court-supervised case with a judge, a docket number, and a settlement administrator, not a rumor or a scam campaign.
Is the 23andMe Settlement Legit or a Scam?
The settlement is legit, and it’s overseen by a federal bankruptcy judge, not a private company acting alone. The only authorized settlement website is run by Kroll Settlement Administration, the court-appointed administrator.
Scammers have used real breach news like this one to send fake “claim your payout” texts and emails. Real settlement communications come from Kroll, never ask for a fee, and never ask for your Social Security number by text message.
If you’re unsure whether a message is real, don’t click links inside it. Go directly to the official settlement site by typing the address yourself, or search for the case name plus “settlement” on a search engine.
How Much Is the 23andMe Settlement Worth?
The consumer class settlement totals $46.75 million, reduced by $14.29 million already paid out earlier in the case, leaving about $32.46 million still to be distributed. That figure is separate from an $18 million deal announced in July 2026 with a coalition of state attorneys general.
Here’s how the money breaks down for the two different settlements:
| Settlement | Total Amount | Who It Pays |
|---|---|---|
| Consumer class action (Chrome Holding Co. bankruptcy) | $46.75 million | Individual claimants who filed by Feb. 17, 2026 |
| Multistate attorneys general settlement | $18 million | State governments (42 states plus D.C.) |
The $18 million multistate settlement doesn’t put money directly in individual pockets. It compensates state governments for investigation and enforcement costs. Pennsylvania is set to receive $491,902 and New Jersey $409,588 as two examples of how it’s being split.
Key Takeaway: Two different 23andMe settlements exist right now, and only the $46.75 million consumer fund pays individual claimants.
How Much Will I Get From the 23andMe Settlement?
If you filed a valid claim by the deadline, your payout depends on which category you claimed under. There’s no flat, guaranteed amount for everyone.
| Claim Type | Estimated Payout | Requirements |
|---|---|---|
| Statutory Cash Claim | About $100 (may adjust based on total valid claims) | Simple claim form, no documentation for most people |
| Health Information Claim | About $165 | Applies if you received notice your health info was compromised |
| Extraordinary Claim | Up to $10,000 | Documented, unreimbursed losses tied directly to the breach |
These are estimates, not locked figures. The Statutory Cash Claim amount can rise or fall depending on how many people filed valid claims, since the fund is split on a pro rata basis.
Not yet determined: the exact final dollar amount per claimant, because distribution depends on the bankruptcy reconciliation process the settlement site describes as likely to “take considerable time.”
Reality Check
No court or settlement administrator will ever text you first asking you to click a link to claim money. Filing a claim in a real class action is always free, and paying a third-party “claim helper” service for this settlement is unnecessary since Kroll processes claims directly at no cost to you.
How Do I Join the 23andMe Class Action Lawsuit?
You can no longer join this settlement through a new claim, because the filing deadline of February 17, 2026, has passed. If you were a class member and didn’t opt out by December 29, 2025, you’re still legally bound by the settlement’s terms even without filing.
For anyone who filed on time and is now checking status, here’s what the original process looked like:
- Confirm you received an official notice from Kroll Settlement Administration.
- Visit the authorized settlement website directly.
- Choose your claim type: Statutory Cash, Health Information, or Extraordinary.
- Upload documentation if filing an Extraordinary Claim.
- Submit your preferred payment method.
- Save your confirmation number for your records.
That window is now closed, and no new submissions are being accepted through the settlement portal.
What If I Missed the 23andMe Settlement Deadline?
If you missed the February 17, 2026 deadline, you generally can’t file a new claim, but you’re still bound by the settlement’s release terms if you didn’t opt out earlier. This is similar to missing a store return window without a receipt: the transaction is closed even though the underlying issue is real.
There was one narrow exception. Claimants who submitted an incomplete form had until June 12, 2026, to file a Deficiency Cure Form fixing errors, and that window has also closed now. If you believe you were wrongly excluded, contacting the settlement administrator directly at the number listed on the official site is your best remaining option, though there’s no guarantee of a late exception.
Key Takeaway: With both the claim deadline and the deficiency cure deadline now passed, most people who didn’t file by June 12, 2026, are no longer eligible for a payout from this fund.
How Do I Check My 23andMe Claim Status?
You check your claim status by contacting Kroll Settlement Administration directly, since there’s no confirmed public tracking portal for individual payment timing. The official phone line for the settlement is (833) 621-5792.
Claimants can also use the “Contact Us” form on the official settlement website to ask about their specific submission. Because payment timing is tied to the bankruptcy’s broader reconciliation process, don’t expect a specific check-mailing date from a phone call.
What Is the Latest 23andMe Lawsuit Update?
The biggest recent development is the July 7, 2026 final approval order from U.S. Bankruptcy Judge Brian C. Walsh, clearing the $46.75 million consumer settlement to move toward payment. That order reduces the amount still owed to $32.46 million after accounting for prior distributions.
Days later, on July 14 and 16, 2026, a second and separate $18 million settlement was announced between 23andMe and a coalition of 43 state attorneys general, resolving claims that the company failed to use basic safeguards like password blocklisting and multifactor authentication. New York Attorney General Letitia James led part of that multistate investigation.
Key Takeaway: As of late July 2026, the consumer settlement has final court approval, but individual checks have not started mailing broadly yet.
When Will 23andMe Settlement Checks Be Mailed?
There’s no confirmed mailing date for the remaining $32.46 million in consumer payouts as of this writing. The official settlement site states plainly that payment timing depends on the broader bankruptcy reconciliation process, which it describes as likely to take considerable time.
About $14.29 million had already been distributed to claimants earlier in the case, largely funded through 23andMe’s cyber insurance policies. The remaining balance is expected to go out in additional distributions following the July 7, 2026 final approval, but an exact date is not yet confirmed.
What Is the 23andMe Data Settlement?
The term “23andMe data settlement” typically refers to the consumer class action over the October 2023 data breach, though it sometimes gets confused with the separate multistate government settlement. Both stem from the same underlying breach but resolve different types of claims.
| Settlement Name | Filed Against | Resolves |
|---|---|---|
| Consumer class action | Chrome Holding Co. (f/k/a 23andMe) | Individual customer harm from the breach |
| Multistate AG settlement | Chrome Holding Co. | State enforcement and investigation claims |
| Canadian consumer settlement | 23andMe Holding Co. | Canadian residents affected between May 1 and Oct. 1, 2023 |
A parallel Canadian settlement worth about US$3.25 million had its own claims deadline of June 25, 2026, which has also closed for Canadian residents.
Why Is 23andMe Being Sued?
23andMe was sued after disclosing in October 2023 that hackers used a credential stuffing attack, meaning stolen passwords reused from other sites, to break into user accounts between April and September 2023. Attorneys general later found the company lacked basic protections like multifactor authentication.
Once inside individual accounts, attackers exploited 23andMe’s “DNA Relatives” and “Family Tree” sharing features to reach far more people than the accounts they initially broke into. That’s how a breach of roughly 14,000 direct accounts expanded to expose data tied to an estimated 6.9 million people.
Some of the stolen data, including genetic ancestry profiles, later appeared for sale on the dark web. Reports at the time noted the leaked data disproportionately identified users of Chinese and Ashkenazi Jewish heritage, which intensified scrutiny of the breach.
What Happened in the 23andMe Data Breach?
The breach exposed personal and, for some users, genetic information tied to nearly 6.9 million 23andMe customers. It began around April 2023 and wasn’t caught until roughly five months later.
What was exposed:
- Account and profile information for about 14,000 directly compromised accounts
- Data for 5.5 million DNA Relatives profile connections
- Data for 1.4 million Family Tree feature users
- In some cases, health information and genetic ancestry details
The company disclosed the incident in an October 2023 blog post. It has since required two-step verification for all accounts and limited employee access to genetic data.
Who Qualifies for the 23andMe Settlement?
You may have qualified for the consumer settlement if you were a 23andMe customer and received an official notice stating your data was accessed during the 2023 Cyber Security Incident. Eligibility was tied to being a member of the certified settlement class, not simply being a 23andMe user in general at any point.
If some people on your household 23andMe account didn’t receive a notice, they could still confirm class membership by contacting Kroll directly. Eligibility for the higher-value Health Information Claim specifically required notice that health-related data was compromised, not just general account data.
Since the claim deadline has passed, this eligibility information now mainly helps people understand whether they were included, not how to newly join.
Is California Part of the 23andMe Settlement?
California is excluded from the multistate attorneys general settlement because the state is pursuing its own separate civil lawsuit against 23andMe over the breach. A bankruptcy judge additionally barred California on July 10, 2026, from seeking monetary relief through the bankruptcy case, though the state can still pursue non-monetary remedies.
California residents were still eligible for the separate $46.75 million consumer class settlement if they received a qualifying notice, since that case is distinct from the state’s own civil action.
What Is the 23andMe Class Action Lawsuit’s Bankruptcy Connection?
23andMe filed for Chapter 11 bankruptcy protection in March 2025, which moved settlement proceedings from federal district court into bankruptcy court. That shift is why payment timing is tied to the company’s broader financial reconciliation rather than a simple settlement fund payout schedule.
In July 2025, the nonprofit TTAM Research Institute, led by 23andMe co-founder Anne Wojcicki, completed a $305 million acquisition of the company’s assets. The company then legally renamed itself Chrome Holding Co., with its operating subsidiary becoming ChromeCo, Inc.
This is a bit like a store closing and reopening under new ownership: the brand and product may continue, but the legal entity handling old claims is now different, and old debts get sorted through a formal court process rather than the original business.
What Happens Next
July 7, 2026: Bankruptcy court granted final approval to the $46.75 million consumer settlement.
July 14 to 16, 2026: The separate $18 million multistate attorneys general settlement was announced and is being paid immediately from available bankruptcy funds.
Expected, ongoing 2026: Additional distributions from the $32.46 million remaining consumer settlement balance, timing tied to bankruptcy reconciliation.
TBD: Confirmed mailing dates for remaining individual consumer payments.
TBD: Resolution of California’s separate, ongoing civil lawsuit against the company.
Frequently Asked Questions
Is the 23andMe lawsuit still active in 2026?
Yes, though the consumer settlement portion received final court approval on July 7, 2026.
A separate California lawsuit and the newly announced multistate settlement are also active this year.
Can I still file a 23andMe settlement claim?
No, the claim deadline of February 17, 2026, has passed, and the later deficiency cure deadline of June 12, 2026, has also closed.
If you didn’t file by those dates, you generally can’t submit a new claim now.
How much money is 23andMe paying out total?
The consumer class settlement totals $46.75 million, and a separate multistate attorneys general settlement adds another $18 million.
These are two distinct settlements paying different groups.
Who is the 23andMe settlement administrator?
Kroll Settlement Administration LLC administers the consumer class settlement under court supervision.
Its official phone line is (833) 621-5792.
Will I get $10,000 from the 23andMe settlement?
Only claimants who filed an Extraordinary Claim with documented, unreimbursed losses tied to the breach can receive up to $10,000.
Most valid claims fall in the $100 to $165 range instead.
Is 23andMe still in business after the lawsuit?
Yes, 23andMe’s assets were sold in 2025 to TTAM Research Institute, and the company now operates under the legal name Chrome Holding Co.
The consumer-facing genetic testing brand continues under the new ownership.
Why isn’t California included in the 23andMe multistate settlement?
California is pursuing its own separate civil lawsuit against the company over the same data breach.
A bankruptcy judge barred the state from seeking monetary relief through the bankruptcy case on July 10, 2026.
When will I actually receive my 23andMe settlement payment?
There’s no confirmed date yet, since payment timing depends on the bankruptcy reconciliation process described by the settlement site as likely to take considerable time.
About $14.29 million had already been paid out before the July 2026 approval, with more distributions expected.
If you already filed a claim, the best move now is watching for direct communication from Kroll rather than searching for a new way to file. Calendar this: the consumer settlement fund still owes an estimated $32.46 million to claimants, with no confirmed mailing date as of July 22, 2026.
