California Attorney General Rob Bonta announced a settlement where 23andMe's successor, Chrome Holding Company, will pay $6 million to resolve allegations of inadequate data protection leading to a 2023 breach.

The vulnerability or weakness

Not stated in the sources.

Earlier attacks and coverage

No earlier related attack in our archive yet.

Business impact

The settlement highlights the significant financial and operational risks associated with data breaches, emphasizing the importance of robust cybersecurity measures. Companies must ensure they comply with legal obligations to protect customer data, or face substantial financial penalties.

Industries affected

Not stated in the sources.

Users affected

Over 7 million customers were affected, with the settlement ensuring their right to delete their data and have genetic samples destroyed, reflecting the severe privacy concerns for affected individuals.

Sources