Attorney General Kris Mayes today joined a coalition of 42 attorneys general announcing a settlement with the bankruptcy trustee for 23andMe, resolving allegations stemming from a 2023 data breach that compromised the genetic data of 6.9 million customers worldwide. Of the $18 million, Arizona will receive $612,269 in civil penalties.

“23andMe recklessly exposed Arizonans’ sensitive genetic data to hackers, allowing it to end up on the dark web. This settlement, combined with private class‑action settlements, brings some measure of accountability — but companies that hold such sensitive information must do a better job protecting the data of consumers. We will continue working to hold companies accountable when they fail Arizona consumers.” – AG Mayes