floriparesort.com – 29 May 2026 | California sues 23andMe [titlebase], the consumer genetics testing company, over a massive 2023 data breach that exposed the ancestry and genetic data of nearly 7 million people. The lawsuit, filed by Attorney General Rob Bonta in San Francisco Superior Court, alleges that 23andMe failed to protect customers’ sensitive personal information. The company’s security measures were so lax that cybercriminals were able to operate undetected within 23andMe’s systems for over five months, making off with the personal data of more than 6.9 million people.
The data breach occurred in 2023 when hackers used a credential-stuffing attack to bombard online accounts with huge sets of user names and passwords stolen in previous unrelated attacks. The stolen data of more than 1 million Asian-Pacific Islander and Ashkenazi Jewish users was later posted for sale on the dark web. California sues 23andMe [titlebase] for its failure to investigate or respond to numerous warnings that its systems had been compromised.
The lawsuit accuses 23andMe of not doing enough to protect its customers and not notifying certain customers that their data had been targeted specifically. This is not the first time 23andMe has faced legal action over the data breach. In January 2024, a lawsuit was filed against the company, which later settled for $30 million. California sues 23andMe [titlebase] as the company’s momentum slowed down in recent years after its $3.5 billion public offering in 2021.
At its peak, 23andMe became the best-known name in the emerging area of DNA self-testing, with users paying upwards of $99 for kits that gave them insights into their genetic makeup, potential relatives, and ancestry. However, the company’s assets were acquired by TTAM Research Institute, a nonprofit led by Anne Wojcicki, 23andMe’s cofounder and former CEO, for $305 million. California sues 23andMe [titlebase] as the sale of the stolen data on the dark web took place amidst a period of mounting anti-Asian American and Pacific Islander and antisemitic hate and violence.
In conclusion, the lawsuit filed by California sues 23andMe [titlebase] highlights the importance of protecting customers’ sensitive personal information. The company’s failure to do so has resulted in a massive data breach that has exposed millions of people’s genetic data. As the use of DNA self-testing kits becomes more widespread, it is essential for companies to prioritize the security of their customers’ data. California sues 23andMe [titlebase] to ensure that the company takes responsibility for its actions and to prevent such a breach from happening again in the future.
![California Sues 23andMe [titlebase]: A Massive Data Breach Exposes Millions](https://www.floriparesort.com/wp-content/uploads/2026/05/california-sues-23andme-titlebase-a-massive-data-breach-exposes-millions-scaled.webp)