23andMe users have until July 14 to file a claim in the DNA company's bankruptcy case. Here's how to do it.

Yahoo

4 days ago

Customers of the genetic testing company 23andMe have until July 14 to file a claim as part of a restructuring in its bankruptcy case.
In filing a claim, eligible customers can seek compensation for suffering financial or other damages due to a 2023 cyberattack that compromised the sensitive personal information of nearly 7 million users. The direct-to-consumer company has customers submit a saliva sample for their DNA to be analyzed for ancestry purposes, family traits or health risks.
23andMe disclosed the data breach in October 2023, acknowledging that it had exposed users' personal information, including names, relationship labels, ancestry reports and percentage of DNA shared with relatives. This resulted in multiple class-action lawsuits.
The DNA testing company filed for Chapter 11 bankruptcy protection in the U.S. in March due to low demand for its ancestry kits in the fallout of the breach. 23andMe alerted customers of the July 14 claim deadline back in May, which was set by the U.S. Bankruptcy Court for the Eastern District of Missouri.
There are two types of claims that current and former 23andMe customers can file to receive money back: One is related to cybersecurity (Cyber Security Incident Claim), the other is not cybersecurity-related (General Bar Date Package).
Eligible customers can submit either claim by following the instructions on this website. The deadline to file both types of claims is Monday, July 14, 2025. If it's submitted electronically, the deadline is at 11:59 p.m. CT; if it's submitted by hard copy, the deadline is 4:59 p.m. CT.
Cyber Security Incident Claim
23andMe customers who are eligible to submit the Cyber Security Incident Claim electronically or via postal mail have to meet the following criteria:
They were a customer of 23andMe between May 1, 2023, and Oct. 1, 2023.
They received a notice that their personal information was compromised in the 2023 data breach.
The customer 'incurred monetary damages or non-monetary damages' related to the cybersecurity incident.
General Bar Date Package
For 23andMe customers who believe they have a claim against the company's services, but it isn't cybersecurity-related, they should file a claim electronically or via postal mail under the General Bar Date Package. This could be related to non-cybersecurity issues, like problems with a customer's DNA results or telehealth services.
If a 23andMe customer has questions about the claims process, more information can be found here. Customers can also email [e-mail] or call [phone].
No. A Chapter 11 bankruptcy filing means the company is restructuring, instead of liquidating its assets. 23andMe announced at the end of June that it has found a buyer, TTAM Research Institute, which is a nonprofit led by 23andMe cofounder and former CEO Anne Wojcicki. 'The transaction remains subject to Bankruptcy Court approval and customary closing conditions,' the company says.
The access that current 23andMe customers have remains unchanged. 'There are no changes to how we store, manage or protect customer data,' according to 23andMe.
After filing for Chapter 11 bankruptcy, 23andMe received permission from a judge to sell its most valuable asset — customers' DNA data. 'TTAM has affirmed its commitment to comply with 23andMe's privacy policy and applicable law with respect to treatment of customer data,' the company says, acknowledging the potential sale to TTAM Research Institute.
A customer's 23andMe DNA data is not protected under the Health Insurance Portability and Accountability Act, known as HIPAA, which is a law that protects a person's private health information from being shared without the person's knowledge or consent.
HIPAA only protects that type of information when it's provided to an entity like a hospital system, physician health plans or billing companies that conduct business with them. 23andMe is not subject to HIPAA regulations because it's a direct-to-consumer company outside of the health care realm. The person is treated as a consumer rather than a patient.
The company noted in their FAQ for customers that there's an option for them to delete their data and account.
Here's how users can delete their account and personal information:
Log into your 23andMe account and go to the 'Settings' section of your profile
Scroll to a section labeled '23andMe Data' at the bottom of the page
Click 'View' next to '23andMe Data'
Scroll to the 'Delete Data' section
Click 'Permanently Delete Data'
Confirm your request: You'll receive an email from 23andMe; follow the link in the email to confirm your deletion request
"If a customer opted in to 23andMe Research, their Personal Information will no longer be used in any future research projects," a 23andMe spokesperson told CNET. "Please note, data cannot be removed from research that's already been conducted."