In re 23andMe Customer Data Security Breach Litigation data breach case

US District Court, Northern District of California · 3:24-md-03098 · filed Apr 16, 2024 · Active

Consolidated suits over the 2023 credential stuffing attack that exposed ancestry and profile data of about 6.9 million 23andMe users.

The case

Plaintiffs: Consumer class plaintiffs
Defendants: 23andMe, Inc.
Court: US District Court, Northern District of California
Docket: 3:24-md-03098
Filed: Apr 16, 2024
Status: Active23andMe filed for bankruptcy in March 2025, which affected the proposed class settlement.

3 dated entries

Date	Entry	Type	Source
Feb 18	Ruling: Order by Judge Edward M Chen GRANTING 188 STIPULATED DISMISSAL WITH PREJUDICE. Any non-CM/ECF Participants have been served by First Class Mail to the addresses of record listed on	Ruling	Link
Apr 14, 2025	Ruling: NOTICE of Voluntary Dismissal Without Prejudice by Max Alperstein, Arya Shoaee (Hart, Yana)	Ruling	Link
Apr 16, 2024	Filing: Complaint filed: IN RE: 23ANDME, Inc., Customer Data Security Breach Litigation	Filing	Link

When	Case	Kind	Status	Filed
Dec 11, 2025Filed 9mo agofiled	ICO fine: LastPass, 2022 breachDecidedData breachUK Information Commissioner's OfficeGBP 1.2 million	Data breach	Decided	Dec 11, 2025
Aug 13, 2025Filed 13mo agofiled	In re Coinbase Customer Data Security Breach LitigationActiveData breachS.D. N.Y.	Data breach	Active	Aug 13, 2025
Jun 17, 2025Filed 15mo agofiled	ICO fine: 23andMe, genetic data breachDecidedData breachUK Information Commissioner's OfficeGBP 2.31 million	Data breach	Decided	Jun 17, 2025
Apr 8, 2025Filed 18mo agofiled	In re PowerSchool Customer Data Security Breach LitigationActiveData breachS.D. Cal.	Data breach	Active	Apr 8, 2025
Jan 15, 2025Filed 20mo agofiled	FTC: GoDaddy, hosting securitySettledData breachUS Federal Trade Commission	Data breach	Settled	Jan 15, 2025
Dec 17, 2024Filed 21mo agofiled	DPC fine: Meta, 2018 Facebook breachDecidedData breachIrish DPCEUR 251 million	Data breach	Decided	Dec 17, 2024
Oct 9, 2024Filed 24mo agofiled	FTC: Marriott and Starwood, data breachesSettledData breachUS Federal Trade Commission	Data breach	Settled	Oct 9, 2024
Oct 8, 2024Filed 24mo agofiled	In re Snowflake Data Security Breach LitigationActiveData breachD. Mont.	Data breach	Active	Oct 8, 2024

Caption and links

IN RE: 23ANDME, Inc., Customer Data Security Breach Litigation