Affected by the 23andMe Hack? How to Submit a Claim and (Maybe) Get $10K

Another day, another opportunity to claim a settlement amount.

As part of its bankruptcy proceedings, 23andMe is sending out notices about potential claims its customers can submit related to a 2023 breach of the DNA test kit company.

“This notice…is being provided to all current and former customers of 23andMe, and is intended to provide such customers with additional information to assist in determining if you have a claim and filing proofs of claim,” according to the email, which comes from restructuring firm Kroll.

The email gives recipients two opportunities to file a claim: one related to the breach and then just a general claim of having been wronged by 23andMe in some way. We’ll focus on what they’re calling the “Cyber Security Incident.” To be eligible for a settlement payout, you must have:

• Been a 23andMe customer between May 1, 2023, and Oct. 1, 2023.

• Received a notice from the company about your personal information being compromised in the October 2023 incident.

• Incurred monetary damages or other harm as a result of the incident.

The breach began with hackers accessing 14,000 individual 23andMe accounts via “credential stuffing,” where they get a list of email addresses and passwords from a different website’s breach and then attempt to use them on other sites. That gave hackers access to millions of other accounts via 23andMe’s DNA Relatives tool, including full names, percentage of DNA shared, ancestry reports, matching DNA segments, self-reported city/ZIP code, and birth year.

How Much Can I Get?

It’s unclear how much you’ll be able to recover. In September, 23andMe agreed to settle a class-action lawsuit related to the breach for $30 million, with possible payouts of up to $10,000. According to Kroll, however, that case is on hold due to the bankruptcy proceeding, and 23andMe has “not made a decision” about what to do.

Get Our Best Stories!

Stay Safe With the Latest Security News and Updates

Sign up for our SecurityWatch newsletter for our most important privacy and security stories delivered right to your inbox.

By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.

Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

23andMe did not immediately respond to a request for comment.

That said, you should file a claim if you have proof any sort of hardship related to the hack, from ID theft to an influx of scammers. The claim form asks you estimate economic and non-economic damages (emotional distress, mental suffering). The deadline is July 14, 2025, and if you do nothing, you “may result in a waiver of your participation in any distributions,” the Kroll email says.

How Do I Submit a Claim?

There are two ways to submit your claim. You can send a hard copy of your Proof of Claim Form and supporting documents via mail or complete the same process electronically through a claim filing portal. (Law firms can also submit consolidated claims of over 25 affected individuals.)

Details about the portal for online submission and mailing addresses for physical copies are available in the image below:

(Credit: Kroll)

If you have questions, you can email [email protected] or call (888) 367-7556 (Toll-Free in US/Canada) or +1 (646) 891-5055 (International).

About Jibin Joseph

Contributor

Jibin is a tech news writer based out of Ahmedabad, India. Previously, he served as the editor of iGeeksBlog and is a self-proclaimed tech enthusiast who loves breaking down complex information for a broader audience.

Read Jibin’s full bio

Read the latest from Jibin Joseph