23andMe will hand out tens of millions of dollars to settle a class-action lawsuit that was filed after hackers gained access to sensitive information belonging to customers of the DNA testing firm about two years ago.
According to the settlement administrator’s portal, 23andMe will set up a fund worth between $30 million and $50 million to pay victims of the data breach disclosed in October of 2023.
Settlement class members who submit “valid extraordinary claims” could receive up to $10,000 plus a five-year subscription to a medical privacy and genetic data protection service worth $1,875.
The settlement class members whose health information was breached stand to receive up to $165.
Victims of the 23andMe data breach who were residents of California, Illinois, Oregon or Alaska at the time of the cyberattack will get an estimated $100 per person.
Some of the protected health information and personally identifiable information that was exposed in the data breach that impacted approximately 6.4 million US residents included names, geographic location, profile pictures and dates of birth. Other information included “ancestry reports, ancestors’ birth locations and family names, family tree information” as well as genetic information.
To qualify for the settlement, victims must file a claim by February 17th of 2026. The final approval hearing will be held on January 20th of 2026. Despite agreeing to the settlement, 23andMe denies any wrongdoing.
Following the October of 2023 data breach and other challenges, 23andMe filed for bankruptcy in March. In June, 23andMe was sold to its co-founder and former CEO, Anne Wojcicki, for $305 million and has since been renamed Chrome.

