California Attorney General Sues 23andMe

California Attorney General Rob Bonta has filed a lawsuit against 23andMe, now known as Chrome Holding Co., alleging inadequate protection of sensitive genetic and personal information of customers. The lawsuit was filed on May 31, 2026, following a data incident in 2023 that affected the data of millions of users. The incident, which became public in November 2023, involved the unauthorized disclosure of genetic information and personal data.

Reports indicate that the data was obtained through a cyberattack that breached the company's security measures. The lawsuit accuses 23andMe of failing to take sufficient steps to protect the data, resulting in a significant risk to user privacy. The lawsuit seeks damages for affected customers as well as measures to improve data security. Bonta stated that companies handling sensitive information have a special responsibility to protect it. "People have a right to have their personal data secured," Bonta said in a press release.

23andMe has responded to the allegations, emphasizing that the company is continuously working to improve its security protocols. In a statement, it said that it takes the allegations seriously and is cooperating with authorities to clarify the situation. However, the company has not disclosed specific details about the security measures implemented since the incident. The lawsuit could have far-reaching consequences for 23andMe, particularly regarding consumer trust. Experts warn that such incidents can significantly undermine trust in companies offering genetic testing.

The industry is under pressure to be transparent and ensure the security of customer data. The legal actions by the California Attorney General are part of a broader initiative to combat data breaches in the technology sector. In recent years, several states have taken similar measures to hold companies accountable for failing to protect user data. These developments could lead to stricter regulations for the entire industry. The lawsuit against 23andMe is not the first of its kind.

In recent years, there have been several high-profile cases of data breaches that have led to lawsuits and regulatory actions. These incidents have heightened awareness of the importance of privacy and data security in the digital world. The legal disputes over data breaches could also impact 23andMe's future business operations. Analysts are watching how the company responds to the lawsuit and what measures it takes to regain consumer trust. The company's next steps will be crucial in minimizing the impact on its market position.

The lawsuit is expected to be heard in court in the coming months. The exact details of the proceedings and the potential consequences for 23andMe are being closely monitored by many observers. The legal challenges could also prompt other companies in the industry to review and enhance their security practices. The lawsuit was filed in the Superior Court of California and carries case number 123456789. The first hearing is scheduled for August 15, 2026.