23andMe customers affected by a data breach may be eligible for cash or monitoring services. Here’s how to file a claim before the deadline.
If 23andMe emailed you about a data breach, that message might finally be worth opening.
Millions of customers were caught up in a cyberattack that exposed sensitive personal and genetic information, triggering lawsuits and, eventually, a nationwide settlement. With the deadline to file a claim fast approaching, eligible users could receive cash, credit-monitoring services, or both — but only if they act in time.
Here’s what’s going on and what you need to know to potentially collect your share before time runs out.
Back in October 2023, 23andMe confirmed a cyberattack that exposed personal information of about 6.4 million US customers who used the service between May 1 and Oct. 1, 2023.
Lawsuits followed, accusing the company of failing to safeguard user data. After years of litigation and negotiations that were folded into the company’s Chapter 11 bankruptcy proceedings, a class-action settlement was finalized in early 2026.
If you’re part of the settlement class — meaning you meet all three criteria of being a U.S. resident, a customer in the relevant window, and having received a breach notice — you must file a claim by Feb. 17, 2026 to get benefits.
The settlement includes a mix of cash and services depending on what happened to you:
Taken together, the settlement fund is expected to range from $30 million to $50 million, with exact distribution depending on how many valid claims get filed.
Getting in line for this settlement is straightforward, but you must act fast. You can submit your claim:
Either way, your claim must be received or postmarked by Feb. 17, 2026 to count. If you don’t file by that date, you’ll likely lose the right to any cash payment or the monitoring benefit — even if you’re eligible.
Once claims are processed and the bankruptcy reconciliation wraps up, payouts and enrollments will begin, though that may take several months.
Bottom line: if you got hit by the 23andMe breach and haven’t yet filed a claim, this is one of those rare moments when reading an email notice actually matters. Gather up any receipts you need to support your claim, decide which category fits you, and get your claim in before the clock runs out.
Related reading: In January, it was reported that Comcast agreed to pay $117.5 million to settle a class action lawsuit tied to a large-scale data breach.