23andMe’s $46.75 Million Data Breach Settlement Issued Payments to Approved Claimants on Sept. 29 and 30

Venmo deposits from a sender called “23andMe Data Settlement” started showing up for some former customers of the genetic testing company in the first days of October. The official settlement website now confirms the money went out: payments on approved claims in the $46.75 million data breach settlement were issued on Sept. 29 and 30, 2026.

Not everyone who filed was paid. Some claims were rejected and others were listed as still under review, and one category of claimants has to supply payment details before anything can be sent.

What the settlement site now says

“All submitted Claims have been reviewed, and payments for approved Claims were issued September 29th and 30th, 2026,” the official 23andMe settlement website states. The site is run by Kroll Settlement Administration, the settlement administrator.

The case is In re: 23andMe, Inc. Customer Data Security Breach Litigation. It began in federal court in San Francisco and moved to the U.S. Bankruptcy Court for the Eastern District of Missouri after 23andMe filed for bankruptcy in March 2025. The court granted final approval on Jan. 30, 2026, and on July 7, 2026, approved a final settlement amount of $46.75 million, according to the settlement site.

The company itself no longer exists in its old form. Its assets were sold in 2025 to TTAM Research Institute, a nonprofit led by co-founder Anne Wojcicki, and the remaining bankrupt entities were renamed Chrome Holding Co. and ChromeCo, Inc.

How much claimants were told to expect

The settlement notice set out three cash categories, according to the settlement website:

• Extraordinary Claims, for documented losses tied to the breach: up to $10,000
• Health Information Claims: up to $165
• Statutory Cash Claims: an estimated $100

Claimants could also enroll in five years of a Privacy & Medical Shield and Genetic Monitoring service, using a unique enrollment code through an online portal.

Kroll has not published how much was actually paid per claim type or how awards were calculated, according to Open Class Actions, which has tracked claimant reports since payments began. The site said the deposits it had seen arrived through Venmo and that individual amounts posted by claimants could not be verified.

Not all of the $46.75 million was paid in this round. When the bankruptcy court approved the figure in July, FOX 7 Austin reported that $14.29 million had already been distributed and that the settlement amount was reduced by that sum. Kroll has not said how the rest was divided among the approved claims.

The claim deadline was Feb. 17, 2026, and the deadline to fix deficient claims was June 12, 2026, so no new claims are being accepted.

Claimants still waiting

Health Information Claim payments work differently. The settlement site says they “will be sent to eligible Settlement Class Members once payment information is provided,” so anyone in that group who never chose a payment method needs to do so through the official site.

Open Class Actions reported that some claimants received emails from Kroll saying their claim “has been rejected” without a stated reason, while others were told their claims were still “in review.” It advised claimants to check the email address used on the claim, including spam folders, and the Venmo account tied to that email or phone number before contacting the administrator.

Kroll can be reached through the contact form on the settlement website, by phone at (833) 621-5792, or by mail at 23andMe c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391.

The same tracker warned claimants to ignore anyone offering to “release” or “locate” a settlement payment for a fee and never to share a bank login or full Social Security number.

The breach behind the payout, and the cases still open

The settlement stems from an October 2023 attack in which hackers used “credential stuffing,” logging in with passwords leaked elsewhere, to get into customer accounts and the data shared through them. About 6.9 million customers were affected, FOX 7 Austin reported in July, citing the company. U.S. Bankruptcy Judge Brian Walsh called the $46.75 million deal “fair and equitable and in the best interest of the trust controlled by the bankruptcy administrator of 23andMe.”

Two government cases run alongside the class settlement. Attorneys general from 41 states and the District of Columbia reached a separate $150 million settlement of their bankruptcy claims, with $18 million available to states right away, Straight Arrow News reported in July. That money goes to states, not directly to customers. Texas is set for the largest state payout, at $1.3 million, and South Dakota the smallest, at $149,339, according to the same report. Hawaii, Mississippi, Missouri, Montana, Nebraska, Nevada, Rhode Island and Wyoming did not file claims.

California was left out of that deal because of its own lawsuit. In May, Attorney General Rob Bonta sued Chrome Holding Co. in San Francisco Superior Court, alleging the company failed to check for reused passwords after a known earlier breach, overlooked a coding flaw in its “DNA Relatives” feature and misled users about its security. Bonta’s office says nearly 7 million users nationwide were affected, including 855,541 Californians, and that exposed data included ancestry reports and DNA-relative matches.

Readers following other breach cases can compare the timeline with AT&T’s $177 million data breach settlement, which won final approval but will not pay until its appeals period ends.

Get stories like this by email. Sign up for The Parent Diaries Letter.

This article was produced with AI assistance and edited for accuracy against the sources linked above.

Image: Hannob – CC0/Wikimedia Commons