California sues 23andMe over 2023 data breach that affected 7 million users
California Attorney General Rob Bonta has filed a lawsuit against Chrome Holding Co., formerly known as 23andMe, over a significant data breach that affected 7 million users. The lawsuit alleges that the company failed to adequately protect sensitive personal information and misled customers about the breach. The breach involved hackers accessing user accounts through credential stuffing and exploiting vulnerabilities in the company's systems.
- ▪The data breach compromised sensitive information of 7 million users, including 855,541 California residents.
- ▪Bonta accused 23andMe of failing to protect users' genetic data and misleading them about the breach.
- ▪The hackers exploited a vulnerability in the DNA Relatives feature after gaining access to 14,000 accounts.
Opening excerpt (first ~120 words) tap to expand
News California sues 23andMe over 2023 data breach that affected 7 million users Rob Bonta accused the company, now called Chrome Holding Co., of failing to protect users’ sensitive information. By Mariella Moon May 29, 2026 3:59 am EST bluestork/Shutterstock Chrome Holding Co., the company formerly known as 23andMe, is facing a lawsuit filed by California Attorney General Rob Bonta over a massive security breach in 2023 that compromised millions of people's sensitive data. Bonta is accusing the company of misleading customers and failing to protect their "sensitive personal information and genetic data related to their health, genetic predispositions and risk factors, biological relatives, ancestry and ethnicity." The incident had affected 7 million users across the US, the lawsuit said,…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Engadget.
Discussion
0 commentsMore from Engadget
