23andMe

The genetic testing company **23andMe** faced a significant data breach exposing customers' personal and genetic information. The breach led to legal claims from affected users, prompting the company to propose settlements as part of its ongoing **Chapter 11 bankruptcy proceedings**. The exposed data included sensitive customer details, raising concerns over privacy, identity theft, and potential misuse of genetic information. The breach’s financial and reputational fallout contributed to the company’s restructuring efforts, with a judge reviewing settlement approvals to resolve customer claims. The incident underscores the severe consequences of failing to protect highly personal data in the biotech sector, particularly when such information can have long-term implications for individuals' health, insurance, and security.

Source: https://news.bloomberglaw.com/bankruptcy-law/23andme-bankruptcy-judge-to-rule-soon-on-data-breach-settlements

TPRM report: https://www.rankiteo.com/company/23andme

"id": "23a0702607092625",
"linkid": "23andme",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': True,
                        'industry': 'Biotechnology / Genetic Testing',
                        'location': 'United States',
                        'name': '23andMe',
                        'type': 'Private Company'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Genetic Data']},
 'description': 'The judge overseeing 23andMe’s bankruptcy indicated he’ll '
                'likely rule by Friday afternoon on proposed settlements '
                'resolving data breach claims against the DNA testing company, '
                'which is working to wrap up its Chapter 11 case in the coming '
                'months. The approval aims to resolve claims from customers '
                'whose information was exposed in the breach. The company is '
                'also seeking approval for its Chapter 11 plan disclosures and '
                'vote solicitation procedures following the sale of its '
                'business this summer.',
 'impact': {'brand_reputation_impact': True,
            'customer_complaints': True,
            'data_compromised': True,
            'identity_theft_risk': True,
            'legal_liabilities': True},
 'investigation_status': 'Ongoing (settlement approval pending)',
 'regulatory_compliance': {'legal_actions': True},
 'title': '23andMe Data Breach and Bankruptcy Settlement',
 'type': 'Data Breach'}