PA Attorney General joins lawsuit to stop 23andMe's sale of customer data
23andMe, a popular DNA testing company, filed for bankruptcy in March 2025 and is now looking to sell off its assets by auction. Those assets would include sensitive genetic and health data of its customers.
'The millions of consumers — including many Pennsylvanians — who paid for these services certainly did not expect their sensitive data to one day be sold off to a highest bidder,' Attorney General Sunday said. '23andMe is trying to avoid their legal obligations to consumers simply by labeling this sale and transfer of consumer data as a 'change of ownership.' I continue to encourage 23andMe customers to consider deleting their data from the company's database.'
The lawsuit, filed in federal bankruptcy court on June 9, objects to the bankruptcy sale of the personal information that 23andMe collected and aims to stop the auctioning of it to the highest bidder. The argument is that this kind of information, such as biological samples, DNA data, and medical records, is too sensitive to be sold without every customer's consent and could potentially be used in ways that they were never informed of when they initially signed up for 23andMe.
Pennsylvania joins attorneys general from states like Arizona, Florida, New York, and West Virginia in the lawsuit.
Impacted consumers have until July 14, 2025, to file a proof of claim electronically and can submit a complaint to the Bureau of Consumer Protection or call the hotline at (800) 441-2555.
Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
CNET
2 hours ago
- CNET
23andMe's Data Breach Settlement Could Net You Free Money: Here's How
Hackers used a credential stuffing attack to gain access to 23andMe accounts in October 2023. Getty Images/Viva Tung/CNET Ever used 23andMe? If you have, you might be able to get paid as part of the company's ongoing class-action settlement, but you'll have to move quickly, since it closes in less than two weeks. It's been a tough few years for the once-popular ancestry-tracking service, which was struck by a prolonged data breach that allowed hackers to gain personal data for about half of the company's 14 million customers in 2023. The company has struggled ever since then, and filed for bankruptcy in March 2025. It is now being acquired by TTAM Research Institute, a nonprofit led by 23andMe co-founder Anne Wojcicki, which outbid Regeneron Pharmaceuticals. The San Francisco-based company, which allows people to submit genetic materials and get a snapshot of their ancestry, announced in October 2023 that hackers had accessed customer information in a data breach. A January 2024 lawsuit accused the company of not doing enough to protect its customers and not notifying certain customers with Chinese or Ashkenazi Jewish ancestry that their data had been targeted specifically. It later settled the lawsuit for $30 million. "We have executed a settlement agreement for an aggregate cash payment of $30 million to settle all US claims regarding the 2023 credential stuffing security incident," a 23andMe spokesman told CNET. "We continue to believe this settlement is in the best interest of 23andMe customers, and we look forward to finalizing the agreement." A few months after that decision, there's now an official method available to make a claim and potentially get paid by 23andMe, in some cases as much as $10,000. Keep reading to get all the details you need, and for more, find out why T-Mobile settlement checks have been delayed and discover whether you can claim a piece of Apple's Siri privacy settlement. How many people did the 23andMe data breach hit? The settlement could cover roughly 6.9 million 23andMe customers whose data was targeted. To qualify, 23andMe customers must also have been US residents as of Aug. 11, 2023. That 6.9 million number includes around 5.5 million customers of 23andMe's DNA Relatives profiles, which lets people find and connect with genetic relatives. The other 1.4 million people affected by the breach used another service known as Family Tree, which predicts a family tree based on the DNA users share with relatives, 23andMe said. How much money could I get from the settlement? At the top end, 23andMe has said it would pay out up to $10,000 with an "Extraordinary Claim" to each customer who can verify that they suffered hardships as a direct result of their information being stolen in the data breach that resulted in unreimbursed costs. This includes costs from "identity fraud or falsified tax returns," acquiring physical security systems, or receiving mental health treatment. Residents of Alaska, California, Illinois and Oregon who were affected by the data breach can also apply for a payment as part of the proposed settlement, since those states have genetic privacy laws with damages provisions. The payments for these individuals are expected to be around $100, depending on how many people file for them, a settlement document said. Also, a smaller subset of affected users whose personal health information was impacted by the breach will be able to apply for a payment of $100. Infographic: Gianmarco Chumbe/CNET. Photo:Will the 23andMe settlement include anything else? Beyond those payments, 23andMe will also offer impacted users three years of a security monitoring service called Privacy Shield, which filings described as providing "substantial web and dark web monitoring." How can I file a claim for the 23andMe settlement? To file a claim electronically, you can use this official online portal from the Kroll Restructuring Administration. An additional online form is available if you would like proof of your claim sent to you. Potential claimants can also download and print out hard copies of the claim form and proof of claim form if they wish to submit them by mail. If you plan to use this method, send your forms to one of the addresses listed on the claims website. The deadline to make a claim is July 14. For more, you can read about how class action lawsuits work.
Miami Herald
3 days ago
- Miami Herald
Court approves sale of 23andMe to nonprofit led by co-founder Anne Wojcicki
23andMe, a distressed genetic testing company that filed for bankruptcy this year, has received another potential lifeline. A bankruptcy judge approved the sale of the company's assets and business operations to a nonprofit led by 23andMe's co-founder and former chief executive, Anne Wojcicki. The nonprofit, TTAM Research Institute, will pay $305 million as part of the deal that will probably close in the coming weeks. The South San Francisco company's financial turmoil sparked privacy concerns over what happens to the genetic data of its 13 million customers if it's sold. These worries prompted 1.9 million users to delete their accounts. Several states, including California, sued to block the sale of 23andMe's data without user consent, arguing that customers have an inherent right to their own genetic information. Unlike a password, a person's genetic data can't be changed if compromised. Judge Brian Walsh of the U.S. Bankruptcy Court in the Eastern District of Missouri, in St. Louis, said in an opinion filed Friday that "a company's sale of genetic data is a scary proposition, and reasonable people might conclude that it should not be permitted in any circumstances." But the proposed sale means that Wojcicki would repurchase a business that she helped start and led for years. And she "will improve privacy practices while honoring customers' rights to delete their accounts and data," the judge said. "Core to my beliefs is that individuals should be empowered to have choice and transparency with respect to their genetic data and have the opportunity to continue to learn about their ancestry and health risks as they wish," Wojcicki said in a statement. The entrepreneur has tried to pave the way forward for 23andMe several times in the past. Before 23andMe filed for bankruptcy, the company's special committee rejected Wojcicki's proposal to take the company private by acquiring all of the company's outstanding shares. The company's stock plunged before it filed for bankruptcy. Wojcicki stepped down from her role as chief executive but remained on 23andMe's board. Earlier, drugmaker Regeneron Pharmaceuticals was set to buy 23andMe. Then a bankruptcy judge reopened the bidding process to allow for a bid from TTAM, which offered a higher price. Weighing arguments from states opposed to the sale, Walsh noted that 23andMe's privacy statement says its users' personal information could be sold as part of a merger, acquisition or sale of the company's assets. Under the deal, TTAM would make employment offers to 23andMe workers and genetic data wouldn't be disclosed to new parties, according to the court filing. Once valued at $6 billion, 23andMe filed for Chapter 11 bankruptcy in March. Founded in 2006, the company sells DNA testing kits that people use to learn about their ancestry and health. The company struggled with recurring revenue growth because people just took the DNA test once. It also faced privacy concerns. In 2023, hackers obtained personal information of roughly 7 million customers. Some of the data accessed included ancestry trees, birth years and geographic locations, highlighting the risks that come with handing over data to private companies. In an email sent to customers after the sale was approved, 23andMe said that TTAM is committed to adhering to the company's privacy policy and that customers have the right to opt out of research or delete their accounts. Copyright (C) 2025, Tribune Content Agency, LLC. Portions copyrighted by the respective providers.
Yahoo
3 days ago
- Yahoo
Court approves sale of 23andMe to nonprofit led by co-founder Anne Wojcicki
23andMe, a distressed genetic testing company that filed for bankruptcy this year, has received another potential lifeline. A bankruptcy judge approved the sale of the company's assets and business operations to a nonprofit led by 23andMe's co-founder and former chief executive, Anne Wojcicki. The nonprofit, TTAM Research Institute, will pay $305 million as part of the deal that will probably close in the coming weeks. The South San Francisco company's financial turmoil sparked privacy concerns over what happens to the genetic data of its 13 million customers if it's sold. These worries prompted 1.9 million users to delete their accounts. Several states, including California, sued to block the sale of 23andMe's data without user consent, arguing that customers have an inherent right to their own genetic information. Unlike a password, a person's genetic data can't be changed if compromised. Read more: 23andMe bankruptcy leaves control of genetic data from millions in limbo Judge Brian Walsh of the U.S. Bankruptcy Court in the Eastern District of Missouri, in St. Louis, said in an opinion filed Friday that "a company's sale of genetic data is a scary proposition, and reasonable people might conclude that it should not be permitted in any circumstances." But the proposed sale means that Wojcicki would repurchase a business that she helped start and led for years. And she "will improve privacy practices while honoring customers' rights to delete their accounts and data," the judge said. 'Core to my beliefs is that individuals should be empowered to have choice and transparency with respect to their genetic data and have the opportunity to continue to learn about their ancestry and health risks as they wish," Wojcicki said in a statement. The entrepreneur has tried to pave the way forward for 23andMe several times in the past. Before 23andMe filed for bankruptcy, the company's special committee rejected Wojcicki's proposal to take the company private by acquiring all of the company's outstanding shares. The company's stock plunged before it filed for bankruptcy. Wojcicki stepped down from her role as chief executive but remained on 23andMe's board. Earlier, drugmaker Regeneron Pharmaceuticals was set to buy 23andMe. Then a bankruptcy judge reopened the bidding process to allow for a bid from TTAM, which offered a higher price. Weighing arguments from states opposed to the sale, Walsh noted that 23andMe's privacy statement says its users' personal information could be sold as part of a merger, acquisition or sale of the company's assets. Under the deal, TTAM would make employment offers to 23andMe workers and genetic data wouldn't be disclosed to new parties, according to the court filing. Once valued at $6 billion, 23andMe filed for Chapter 11 bankruptcy in March. Founded in 2006, the company sells DNA testing kits that people use to learn about their ancestry and health. The company struggled with recurring revenue growth because people just took the DNA test once. It also faced privacy concerns. In 2023, hackers obtained personal information of roughly 7 million customers. Some of the data accessed included ancestry trees, birth years and geographic locations, highlighting the risks that come with handing over data to private companies. In an email sent to customers after the sale was approved, 23andMe said that TTAM is committed to adhering to the company's privacy policy and that customers have the right to opt out of research or delete their accounts. Sign up for our Wide Shot newsletter to get the latest entertainment business news, analysis and insights. This story originally appeared in Los Angeles Times. Sign in to access your portfolio
