LITTLE ROCK — Arkansas will receive $431,937 through an $18 million multistate settlement with genetic-testing company 23andMe over a data breach that affected more than 48,000 Arkansans, Attorney General Tim Griffin announced.
Griffin and attorneys general from 41 other states reached the agreement after filing claims related to the breach during the company’s bankruptcy proceedings.
23andMe discovered the breach in 2023. It affected approximately 6.9 million consumers and exposed a range of customer information, including genetic ancestry information in some cases, according to Griffin’s office.
Griffin said the company initially denied the breach and later blamed customers for how they configured their accounts.
“In March 2025, 23andMe filed for bankruptcy protection, and states subsequently filed claims related to the data breach investigation,” Griffin said. “Our coalition has reached an agreement by which 23andMe will pay $18 million to the states. Arkansas’s portion of the settlement will be $431,937.”
A separate $46.75 million class-action settlement approved through bankruptcy court will provide relief to affected U.S. consumers who submitted claims by Feb. 17, 2026.
“I am pleased to see this issue resolved and 23andMe held accountable for its failure to protect Arkansans’ data,” Griffin said.
SHARE THIS STORY WITH OTHERS:
Discover more from NEA Report
Subscribe to get the latest posts sent to your email.
Be the first to comment