Utah households affected by 23andMe breach included in $18 million state settlement

Utah joined more than 40 states in a settlement resolving state bankruptcy claims against 23andMe over allegations tied to the company’s 2023 data breach. Utah’s share is $461,688, but the July 23 agreement does not announce a new filing period for Utah consumers.

Affected individuals were addressed separately through a $46.75 million U.S. class-action settlement. The deadline to submit a claim in that process was February 17, 2026, which had passed before Utah officials announced the multistate agreement.

What happened in the 23andMe breach

23andMe reported in 2023 that a data breach affected approximately 6.9 million users worldwide. The compromised information included sensitive identity and ancestry details and, in some cases, genetic-profile information.

The participating attorneys general investigated whether 23andMe violated state data privacy, consumer protection and genetic-information privacy laws. Oregon and Michigan officials said their multistate investigation found unreasonable data-security practices, including inadequate protections against credential-stuffing attacks, insufficient monitoring and failures to address unusual login activity. Those are investigative conclusions and allegations resolved through the bankruptcy settlement, not a criminal finding.

The Utah Attorney General’s announcement also said lists of information were posted for sale on the dark web and reportedly targeted users of Ashkenazi Jewish and Chinese descent.

What Utah receives

The Utah Attorney General and the Utah Department of Commerce’s Division of Consumer Protection said Utah’s payment is part of an $18 million recovery connected to 23andMe’s bankruptcy proceedings.

The states’ claims were initially allowed at a higher amount, but the actual recovery is limited by the funds available in the bankruptcy estate and by other claims. Utah’s $461,688 is state money; the cited announcements do not describe it as a per-person payment to affected residents.

KSL independently reported the July 23 announcement and confirmed Utah’s share. Other attorneys general’ offices described the same limited recovery and the separate consumer settlement.

The consumer claim deadline has passed

Utah residents who were eligible for individual relief were addressed through the separate $46.75 million class-action settlement in the bankruptcy case. Claims had to be submitted by February 17, 2026.

The July multistate settlement is separate from that consumer process. The Utah announcement does not identify a new consumer claim period, so residents should not assume that the state’s $461,688 share creates a new way to file an individual claim.

The cited announcements do not establish how many Utah residents submitted claims, how much individual payments may be or when any distributions will occur.

Privacy protections after the bankruptcy

The bankruptcy-related data-transfer and sale arrangements also include restrictions and security requirements for future handling of genetic information. Participating attorneys general described measures including enhanced data security, risk analysis, oversight and continued consumer deletion rights.

Those protections arise from the bankruptcy and data-transfer terms. They are separate from the money available through the state recovery and do not change the February 17 consumer-claim deadline.

What Utah residents should watch for

Any later information about distributions, privacy rights or account-related issues should come from the Utah Attorney General, the Division of Consumer Protection or the official settlement administrator. The Utah Attorney General’s office lists a public contact for settlement-related questions, but the cited announcement does not identify a new consumer filing process.

Sources

Discover more from Interactive News

Subscribe to get the latest posts sent to your email.