California AG sues 23andMe over 2023 breach exposing health data

California Attorney General Rob Bonta filed suit against 23andMe after a 2023 breach—attributed to credential-stuffing and a coding error in the DNA Relatives feature—exposed genetic, health, ancestry, and matching data for about 6.9 million customers; attackers offered stolen records for sale and leaked samples, leading to multi-million-dollar fines, multiple lawsuits, and the company's bankruptcy filing, with the complaint alleging violations of several California privacy and consumer-protection laws.