Kentucky is one of several states who will be claiming some funds from a settlement with 23andMe, following a genetic data breach that occurred in 2023.
According to a news release from the Office of Kentucky Attorney General Russell Coleman, Kentuckians who had their personal information compromised following the data breach that affected nearly 7 million 23andMe consumers, including 69,188 in Kentucky.
23andMe is a genetic testing company, and the breach exposed a wide range of data that was subsequently published by bad actors for sale on the ‘dark web’. An investigation by attorneys general found 23andMe failed to employ safeguards like multifactor authentication to investigate unusual login patterns including a massive spike in login attempts, and to properly review and test design features.
Now, following a bankruptcy filing in March of 2025 by 23andMe, a settlement has been reached in the amount of $150 million, with an upfront payment in the amount of $18 million being made. Of that $18 million, Kentucky will receive $259,375.