Connecticut joins settlement resolving claims tied to 23andMe genetic-data breach

Connecticut has joined a settlement with 23andMe’s bankruptcy trustee that resolves allegations connected to a 2023 data breach involving the direct-to-consumer genetic-testing company.

Attorney General William Tong announced Connecticut’s participation on July 17, 2026. The agreement includes a coalition of 42 attorneys general and concerns a breach that compromised the genetic data of 6.9 million customers worldwide, according to the Connecticut Office of the Attorney General.

The announcement is a consumer-protection development for Connecticut, but the available release does not say how many Connecticut residents were affected. The worldwide figure should not be read as a count of Connecticut customers.

A settlement with the bankruptcy trustee

The settlement was reached with 23andMe’s bankruptcy trustee, rather than being described in the announcement simply as an agreement directly with the company. That distinction matters because the release identifies the trustee as the party to the multistate resolution.

The state’s announcement says the settlement resolves allegations tied to the 2023 breach. It does not say that 23andMe admitted every allegation connected to the breach. The settlement therefore resolves the coalition’s claims without the available announcement establishing an admission on each underlying allegation.

The release identifies 23andMe as a direct-to-consumer genetic-testing company. Its central finding for consumers is that genetic data were among the information compromised in the breach, according to the attorney general’s office.

Why the breach remains significant

Genetic information is highly sensitive and difficult to change once it has been exposed. That makes the 2023 incident distinct from many other consumer-data cases: the information at issue is genetic data, not a type of information a consumer can simply replace.

The 6.9 million figure reflects customers worldwide, according to the state release. It establishes the reported scale of the incident, but it does not identify the number of customers in any individual state or specify which Connecticut residents, if any, had data compromised.

Connecticut’s participation places the state among the 42 attorneys general involved in the resolution. Tong’s office announced the state’s role on behalf of Connecticut consumers, while the agreement itself addresses allegations arising from an incident reported as affecting customers worldwide.

What the announcement does not specify

The available announcement does not state Connecticut’s share of any settlement proceeds. It also does not provide individual payment amounts for affected customers or describe the full set of compliance requirements associated with the settlement.

Those omissions mean the announcement alone does not establish whether individual consumers will receive compensation, how any payments would be calculated, or what specific obligations may apply under the agreement. No individual compensation figure should be inferred from the state’s release.

The indexed announcement also does not identify a next deadline, consumer claim process or timetable for further action. For now, the confirmed development is Connecticut’s participation in the multistate settlement with the bankruptcy trustee over allegations tied to the 2023 breach.

For Connecticut residents, the state’s involvement means the attorney general’s office is part of the coalition that reached the resolution. The release provides a confirmed statewide consumer-protection action, while leaving the detailed terms, allocations and any customer-specific process unspecified.

Sources

• Attorney General Tong joins 42-state settlement with 23andMe over genetic-data breach, Connecticut Office of the Attorney General