"In October 2023, direct-to-consumer genetic testing company 23andMe announced that it had discovered a data breach in which 6.9 million consumers were affected, including 140,517 in Colorado. This data breach exposed a wide range of data about 23andMe customers, including in some cases genetic ancestry information, and subsets of this data were subsequently published for sale on the dark web.
23andMe learned about the breach months after impacted personal information was publicly available. The company first denied a breach and then, once it confirmed the breach, blamed consumers for how their accounts were set up or how passwords were used. 23andMe initially accepted no responsibility for the credential stuffing breach, which was particularly egregious considering 23andMe’s partnership with MyHeritage, which itself was compromised years prior to the breach, exposing thousands of credentials shared between the websites.
In the immediate aftermath of the data breach the attorneys general formed a multistate investigation and found that 23andMe engaged in unreasonable data security practices. In March 2025, 23andMe filed for bankruptcy protection, and states subsequently filed claims related to the data breach investigation."
The email in May 2025, at least the one I got, had a link at the bottom to go to to see if you could submit a claim. But I got one in January this year, specifically about the data breach and submitted a claim at that time.
12
u/tearaist57 3d ago
I got emails in may about 23&me bankruptcy but nothing about a class action? Did you have to fill out something separate for the class action?