23andMe reaches $18 million settlement with states for massive breach

A multistate investigation found that an October 2023 breach of 23andMe exposed data for 6.9 million customers, with some stolen data posted on the dark web; 42 state attorneys general reached an $18 million settlement requiring new security measures, oversight, and preserving customers' rights to delete samples and data, while 23andMe later filed for bankruptcy and its assets (including genetic data) were sold to a research institute.