Utah to get more than $460,000 from $18 million 23andMe settlement

Utah and more than 40 other states reached an $18 million settlement with 23andMe tied to the genetic testing company’s 2025 bankruptcy and a prior data breach.

Utah to get more than $460,000 from $18 million 23andMe settlement

Utah is set to receive more than $460,000 under a multistate settlement with genetic testing company 23andMe over a data breach and bankruptcy, according to KPCW.

Utah joined more than 40 other states in the $18 million settlement announced July 22, following 23andMe’s 2025 bankruptcy and a five-month data breach, KPCW reported.

The agreement requires 23andMe to pay $18 million and limits the company’s future use of any genetic information it retained, according to the report. Utah Attorney General Derek Brown’s office and the Utah Department of Commerce announced the settlement.

Utah’s share is more than $460,000, KPCW reported. The state settlement is separate from a $47 million class-action settlement intended to reimburse consumers in Utah and across the country.

KPCW reported that the breach compromised personal information belonging to more than seven million customers, including identifying user data and genetic profiles.

The settlement terms, as reported by KPCW, focus on payment and on how 23andMe may use any genetic information it kept after the breach and bankruptcy.

KPCW reported that the breach lasted five months in 2025 and that 23andMe’s bankruptcy followed. The state settlement announced by Utah officials came after that bankruptcy and in addition to the separate class-action settlement for consumers.

The class-action settlement is meant to reimburse consumers in Utah and elsewhere, according to KPCW. The state settlement resolves claims brought by Utah and other states and directs a portion of the $18 million payment to Utah.

Utah Department of Commerce Commissioner Margaret Busse said companies must protect consumers’ personal information, KPCW reported. The outlet also reported that Busse said 23andMe did not do enough to protect sensitive and private customer information.

The next step under the multistate agreement is for 23andMe to make the required payment and follow the limits on future use of retained genetic information, as described by KPCW. Consumers seeking reimbursement would be covered under the separate $47 million class-action settlement, according to the report.

Sources

Editorial note: This article was prepared with AI assistance and requires editorial review before publication.

▶ View the Web Story
A visual, tap-through version of this report.