Friday, July 17, 2026
Understand the news faster
Understand the news faster
Visual brief U.S. & Politics 3 sources

23andMe accused of failing to protect user data in new lawsuit

California AG Rob Bonta sues the company formerly called 23andMe over customers' genetic data exposed in the 2023 breach

Cross-checked across 3 sources
Full visual brief
Drawn.News visual brief: 23andMe accused of failing to protect user data in new lawsuit
In this brief

Sources & verification

Reporting behind this brief, checked before publication.

Brief text

California Attorney General Rob Bonta sued Chrome Holding Co., formerly known as 23andMe, alleging the company failed to protect sensitive genetic and personal data in a 2023 breach affecting nearly 7 million users.

  1. Frame 1California AG Rob Bonta sues the company formerly called 23andMe over customers' genetic data exposed in the 2023 breach.
  2. Frame 2The complaint says nearly 7 million users had genetic, ancestry, ethnicity and family-link data exposed.
  3. Frame 3Officials say credential stuffing and a DNA Relatives flaw let attackers operate for five months.
  4. Frame 4The state alleges 23andMe missed warning signs, including huge login spikes and dark-web offers.
  5. Frame 5The stolen data was advertised as AAPI and Jewish user data, raising targeted-harm risks.
  6. Frame 6Next test: San Francisco Superior Court weighs California privacy-law claims after the bankruptcy sale.
How this was checked
Reporting
Cross-checked across 3 sources
Claims
We checked the names, dates, numbers, and core facts against the reporting linked above
Artwork
This is an editorial illustration based on the reporting, not source photography
Published
May 29, 4:26 PM EDT
Our standards
Editorial standards and corrections