23andMe Faces New Security Mandates in $18m Data Breach Settlement

23andMe reached an $18 million settlement with a coalition of U.S. attorneys general over a 2023 credential-stuffing breach that exposed profile and ancestry data for more than six million customers; regulators imposed fines and bankruptcy proceedings led to the sale of customer data to TTAM Research, with required security measures (risk analysis, advisory board, deletion rights, and other protections) to safeguard genetic information.