How to Claim Your Payout From the 23andMe Data Breach
If you were affected by the 23andMe data breach, which affected the information of approximately 6.4 million U.S. residents, you only have a few more days to seek compensation. Following the 2023 credential stuffing attack, 23AndMe agreed to a payment of $30 million to $50 million for affected consumers in 2024. The genetic testing company then filed for Chapter 11 bankruptcy in 2025 (introducing new privacy concerns around the potential sale of customer data). The courts approved the settlement last month and class members have until February 17 to submit claims related to the cyber incident.
How much you will receive from the 23andMe settlement
There are several payment levels with 23andMe payment. Users with an “extraordinary claim” – those who suffered identity theft or fraudulent tax filings as a result of the breach – could be entitled to up to $10,000 to reimburse verified expenses, including costs for physical security or cybersecurity systems as well as mental health treatment.
Claimants who received notices that certain health information about them was disclosed in the breach will receive compensation of up to $165. Eligible data include raw genotype data, health reports (including health predisposition reports, wellness reports, and carrier status reports), and self-reported health conditions. People in Alaska, California, Illinois and Oregon will get an extra $100 thanks to state privacy laws. Note that payments will likely take time to be distributed.
The settlement also provides five years of identity monitoring services through a customized program called Privacy & Medical Shield + Genetic Monitoring. This is available to all group members, regardless of payment.
What do you think of it so far?
How to file a 23andMe complaint
Consumers who were affected by the 2023 data breach can file a cybersecurity incident claim, which must be submitted by February 17, 2026 (unless you received notice in 2026 stating otherwise). To be eligible, you must have been a 23andMe customer between May 1, 2023 and October 1, 2023 and received notice (via letter or email) that your information was compromised in the breach. You must also certify that you suffered damages (monetary or non-monetary) as a result of the incident.
Claims can be filed online via the settlement website, or you can send a paper copy of your claim form (postmarked by February 17) to the address provided. To complete a claim, you must provide certain personal information as well as details of the loss you suffered and supporting documentation, such as bank or credit card statements proving the losses.
