AG Raoul announced a bipartisan, multistate settlement with the bankruptcy trustee for 23andMe, resolving allegations stemming from a 2023 data breach that compromised the genetic data of 6.9 million customers worldwide. The settlement includes $150 million in allowed claims for states. However, due to the finite amount of funds in the bankruptcy estate and numerous other claims, the court limited recovery to $18 million, which will be paid out of available bankruptcy funds immediately. Of the $18 million, Illinois will receive more than $500,000.

“The 23andMe data breach compromised the personal data, and in some cases genetic information, of thousands of Illinoisans. This settlement sends the message that companies, particularly those collecting sensitive information from their customers, must have robust protections to keep consumers’ personal data secured.” -AG Raoul