If you are among those impacted by the recent security breach at 23andMe, which affected 14,000 user accounts along with 6.9 million profiles related to DNA lineage and family trees, you can now submit a claim for compensation.

Following a credential-stuffing incident in 2023, 23andMe agreed to a substantial settlement of $30 million for those affected. This genetic testing entity entered Chapter 11 bankruptcy earlier this year—raising concerns over privacy and the potential sale of consumer data. The funds from this settlement will soon be allocated as part of the proceedings.

Compensation Amounts from 23andMe

In the event that equal distribution is applied to the compensation, each affected party could receive approximately $4.35. However, individuals claiming “extraordinary damages,” such as those who experienced identity theft or fraudulent tax activities, have the potential to recover up to $10,000 for verified expenses incurred, which may include costs associated with security measures or mental health services.

Residents of states including Alaska, California, Illinois, and Oregon are set to receive around $100 due to specific state privacy regulations, with the same sum likely being designated for those whose health-related data was compromised.

The settlement has also allocated three years of identity monitoring services via a specialized program called Privacy & Medical Shield + Genetic Monitoring.

Filing a Claim Against 23andMe

The claims process entails two distinct types of claims that can be submitted in connection with 23andMe’s bankruptcy. Affected users can file a Cyber Security Incident Claim, which must be completed by July 14, 2025. Eligibility for this claim is contingent upon being a 23andMe customer between May 1, 2023, and October 1, 2023, and having received notification—either through mail or email—indicating that your data was compromised during the breach. Additionally, you need to affirm that damages (financial or otherwise) were sustained due to the incident.

Online claims can be processed through the Kroll Restructuring Administration portal, or users may opt to send a physical claim form to the designated address. Necessary documentation includes personal details along with evidence of the incurred damages, such as bank or credit card statements supporting the losses.

If you were not impacted by the breach but still have grievances against 23andMe, a general claim form can be submitted, following the same procedure and deadline.