{"id":338937,"date":"2026-05-30T10:16:12","date_gmt":"2026-05-30T10:16:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-ca\/338937\/"},"modified":"2026-05-30T10:16:12","modified_gmt":"2026-05-30T10:16:12","slug":"california-attorney-general-sues-23andme-for-data-breach","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-ca\/338937\/","title":{"rendered":"California attorney general sues 23andMe for data breach"},"content":{"rendered":"\n

The California attorney general filed a lawsuit Thursday against the company formerly known as 23andMe,<\/a> accusing the genetic testing service of failing to protect customers\u2019 data during a 2023 breach. <\/p>\n

The data breach affected nearly 7 million people across the country, including more than 850,000 Californians, according to a release<\/a> from Atty. Gen. Rob Bonta\u2019s office. <\/p>\n

The exposed data contained sensitive material such as raw genetic information and health reports. Hackers listed the data for sale on the dark web in 2023, Bonta said. <\/p>\n

23andMe filed for bankruptcy last year and was acquired by<\/a> TTAM Research Institute, a nonprofit led by the company\u2019s former Chief Executive Anne Wojcicki. Bonta filed suit against Chrome Holding Co., a subsidiary of TTAM and the corporate debtor name that 23andMe operated under during bankruptcy. <\/p>\n

\u201c23andMe collected genetic data about millions of people, failed to meet its obligation under California law to keep that information safe, and then lied to consumers about the severity of its 2023 data breach,\u201d Bonta said in a statement. <\/p>\n

A 2023 investigation by the California Department of Justice found that the hackers were able to operate within 23andMe\u2019s systems for five months without being detected. 23andMe only began investigating once the data were offered for sale on the dark web, the investigation found. <\/p>\n

The hackers<\/a> used a common tactic known as credential stuffing to access the data, which exploits weak and reused passwords. <\/p>\n

\u201cBusinesses, particularly those that collect and maintain sensitive personal and genetic data, can and should know to guard against\u201d credential stuffing, the attorney general\u2019s release said. <\/p>\n

According to the complaint<\/a> filed in the San Francisco Superior Court this week, 23andMe \u201cmisled consumers and failed to take obvious steps necessary to safeguard its customers\u2019 sensitive personal information.\u201d<\/p>\n

23andMe was founded in San Francisco in 2006 and popularized at-home genetic testing, allowing customers to send in a saliva sample and receive a DNA analysis. <\/p>\n

At its peak, 23andMe was valued at $6 billion and attracted celebrity attention, holding \u201cspit parties\u201d where high-profile customers spit into a tube to provide their DNA sample. The samples helped people discover entirely new family trees and could reveal consequential health information, such as a genetic predisposition to cancer. <\/p>\n

After its promising rise, however, the company began seeing signs of trouble. Because users need to provide a DNA sample only once to use 23andMe\u2019s services, the company failed to establish a sustainable business model based on repeat customers. Additionally, 23andMe struggled to license its tech to pharmaceutical companies, which could have boosted profits.<\/p>\n

By the time the company filed for bankruptcy in March 2025, it had collected around 15 million DNA samples. <\/p>\n

The attorney general has a separate, pending legal challenge<\/a> in the U.S. Bankruptcy Court for the Eastern District of Missouri regarding the sale of Californians\u2019 genetic information and material in bankruptcy.<\/p>\n","protected":false},"excerpt":{"rendered":"The California attorney general filed a lawsuit Thursday against the company formerly known as 23andMe, accusing the genetic…\n","protected":false},"author":2,"featured_media":338938,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[139305,14026,9610,7,1801,9,8,1804,9182,28440,3291,123798,139743,95001,592,139744,5274,5589],"class_list":["post-338937","post","type-post","status-publish","format-standard","has-post-thumbnail","category-california","tag-23andme","tag-bankruptcy","tag-bonta","tag-california","tag-california-attorney-general","tag-california-headlines","tag-california-news","tag-company","tag-customer","tag-dark-web","tag-datum","tag-datum-breach","tag-dna-sample","tag-hacker","tag-people","tag-raw-genetic-information","tag-release","tag-sale"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/338937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=338937"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/338937\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/338938"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=338937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=338937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=338937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}