Skip to content
RuleResource Intelligence

← All developments

Iowa Attorney General · July 14, 2026 · Primary source

Attorney General Brenna Bird Announces Multistate Settlement of Bankruptcy Claims Against 23andMe in Genetic Data Breach July 14, 2026

Score 80PRIMARYregulatoryState AGIA

Summary

Iowa Attorney General Brenna Bird joined a coalition of 42 state attorneys general in announcing a settlement with the bankruptcy trustee for 23andMe, resolving allegations arising from a 2023 credential-stuffing attack that exposed the genetic data of approximately 6.9 million customers worldwide. States asserted $150 million in allowed bankruptcy claims but, due to the limited bankruptcy estate, will recover only $18 million. The settlement resolves multistate consumer-privacy law claims tied to the improper exposure of highly sensitive genetic information.

What this may mean

The $18 million multistate recovery, against $150 million in asserted claims, establishes a concrete, if constrained, precedent for state AG enforcement of consumer-privacy laws against entities that suffer large-scale genetic data breaches. Organizations holding genetic or similarly sensitive health data face demonstrated multistate coalition enforcement risk, including claims filed in bankruptcy proceedings, when data-security failures expose that data.

Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.

Related items