Skip to content

← All developments

Tennessee Attorney General · July 14, 2026 · Primary source

Attorney General Jonathan Skrmetti Secures Multistate Settlement over 23andMe Genetic Data Breach

Score 60PRIMARYenforcementState AGTN

Summary

Tennessee AG Jonathan Skrmetti joined a coalition of 43 state attorneys general in securing an $18 million settlement with the bankruptcy trustee for 23andMe, resolving state claims arising from the company's 2023 data breach that exposed genetic and personal information of 6.9 million customers worldwide. Tennessee is expected to receive approximately $348,687 from the settlement fund. The action was announced July 14, 2026, and resolves multistate consumer protection and data privacy claims against the bankrupt company.

What this may mean

The settlement resolves state enforcement claims against 23andMe related to its failure to protect highly sensitive genetic data, a category of information increasingly subject to distinct state-level privacy regulation. The action signals that state AGs treat genetic data breaches as a distinct enforcement priority, separate from general HIPAA enforcement, and the multistate coordination model used here raises the enforcement profile for genetic testing companies and any healthcare entity handling genomic data.

Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.

Related items