California sues over 23andMe breach that exposed millions of people’s data.

Attorney General Rob Bonta filed a lawsuit against Chrome Holding Co. — formerly 23AndMe — claiming that the company failed to protect user information, leading to the massive 2023 breach that included data belonging to 6.9 million users. In 2024, 23andMe agreed to pay $30 million to settle a class action lawsuit related to the breach. [California Office of the Attorney General] Posts from this author will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. A free daily digest of the news that matters most. The Verge is a part of PMX Global, LLC, a subsidiary of Penske Media Corporation. © 2026 VM Publishing, LLC. All rights reserved. Sign in to see your notifications or create an account to join the conversation.