California Takes Legal Action Over Genetic Data Catastrophe

California Attorney General Rob Bonta filed a landmark lawsuit on May 28, 2026 against genetics testing company 23andMe, targeting the company over a 2023 data breach that exposed the genetic and personal information of approximately 6.9 million U.S. customers. The complaint, filed in San Francisco Superior Court, accuses 23andMe of ignoring repeated warnings that its systems had been compromised and deliberately downplaying the severity of the breach.

The breach began in April 2023 and lasted approximately five months. About 856,000 Californians were directly affected. The exposed data included some of the most sensitive personal information imaginable: customers’ health conditions, genetic predispositions, biological relatives, ancestry, and ethnicity information that cannot be changed or revoked once exposed.

What Was Exposed And Why It’s Uniquely Dangerous

Unlike a credit card number or password, genetic data is permanent. Once your DNA profile is in the hands of bad actors, the damage is irreversible. The 23andMe breach is particularly alarming because the hacker reportedly targeted users with Chinese and Ashkenazi Jewish ancestry, offering their information for sale on the dark web raising serious concerns about the potential for genetic discrimination and targeted persecution.

“This data breach, and the company’s handling of it, was entirely unacceptable,” Attorney General Bonta stated in a press conference. He is seeking civil fines that could total “multiple millions” of dollars for violations of California’s Genetic Information Privacy Act and state consumer protection laws.

Bankruptcy Complicates the Legal Battle

The lawsuit comes 14 months after 23andMe filed for Chapter 11 bankruptcy in March 2025, citing the data breach, related litigation, increased competition, and falling demand for genetics testing. A federal judge overseeing the bankruptcy had already granted final approval for a $30 million to $50 million settlement fund to resolve most U.S. customer claims from the breach.

Bonta acknowledged the complexity: “We would need to work through the bankruptcy process to collect any judgment.” Last July, TTAM Research Institute a nonprofit controlled by 23andMe co-founder Anne Wojcicki purchased 23andMe’s assets for $305 million. Bonta had opposed that sale on privacy grounds, arguing that California law gives consumers the right to consent to any transfer of their most sensitive personal data.

Broader Implications for Genetic Privacy

The 23andMe case has become a watershed moment for genetic data privacy regulation. It raises critical questions that the tech and health industries must now confront:

Who owns your DNA data? When a company goes bankrupt, what happens to the genetic profiles of millions of customers?
Are current laws adequate? California’s Genetic Information Privacy Act is one of the strongest in the nation but the 23andMe case reveals significant enforcement gaps
What are the risks of genetic targeting? The breach demonstrated that genetic data can be used to identify and target specific ethnic groups
How should AI companies handle biometric data? As AI health applications proliferate, the 23andMe case sets a critical precedent

Key Takeaways

California AG sues 23andMe over a breach affecting 6.9 million users (856,000 Californians)
Exposed data included genetic predispositions, health conditions, ancestry, and ethnicity
Hackers reportedly targeted users of Chinese and Ashkenazi Jewish ancestry
23andMe is in bankruptcy; collecting any judgment will require navigating that process
Fines could total “multiple millions” under California’s Genetic Information Privacy Act
The case sets a major precedent for genetic data privacy in the AI and health tech era

As AI-powered health and genomics applications become more prevalent, the 23andMe lawsuit serves as a stark warning: companies that collect the most intimate data imaginable must be held to the highest standards of security and transparency or face the full force of the law.

For quality tech news, professional analysis, insights, and the latest updates on technology, follow TechTrib.com. Stay connected and join our fast-growing community.

TechTrib.com is a leading technology news platform providing comprehensive coverage and analysis of tech news, cybersecurity, artificial intelligence, and emerging technology. Visit techtrib.com.

Contact Information: Email: news@techtrib.com or for adverts placement adverts@techtrib.com