A settlement was reached between 42 states and 23andMe, a genetic-testing company whose data breach impacted some 6.9 million Americans.
Arkansas Attorney General Tim Griffin said in a news release that the breach affected more than 48,000 Arkansans, exposing a wide range of customer data including, in some cases, genetic ancestry information. The company initially denied the breach, then blamed customers for how they had set up their accounts, Griffin said. In March 2025 23andMe filed for bankruptcy protection, prompting states to file claims related to the data breach investigation.
The coalition of state attorneys general reached an agreement by which 23andMe will pay $18 million to the states. Arkansas’s portion of the settlement will be $431,937. 23andMe also agreed to a $46.75 million class-action settlement in bankruptcy court to provide relief to affected U.S. consumers who submitted claims by February 17, 2026.
“I am pleased to see this issue resolved and 23andMe held accountable for its failure to protect Arkansans’ data,” Griffin said.
To read the settlement agreement, click here.
Discover more from
Subscribe to get the latest posts sent to your email.
