23andMe Sued by California Over Massive 2023 Data Breach

California Attorney General Rob Bonta has sued 23andMe and its successor over the 2023 breach that exposed data from about 6.9 million users.

The complaint says the company failed to protect sensitive ancestry and genetic information and ignored warning signs before a credential-stuffing attack.

The breach affected many Asian-Pacific Islander and Ashkenazi Jewish customers, and some stolen data was later posted for sale on the dark web.

The case adds to earlier litigation over the same incident and comes after 23andMe’s bankruptcy and asset sale.