Smitha Gundavahjala

Lessons from the 23andMe Breach for Businesses of All Sizes

Breach, Data Privacy

On May 28, 2026, California’s Attorney General filed a lawsuit against Chrome Holding Co., formerly 23andMe, for failing to protect users’ sensitive data, including genetic data. In 2023, 23andMe experienced a major cybersecurity breach, exposing sensitive data and genetic information for 7 million customers across 14,000 accounts. Although 23andMe’s assets were liquidated in a 2025 […]