California is suing 23andMe over its 2023 breach that exposed 7 million users' DNA data

Attorney General Rob Bonta alleges Chrome Holding Co., 23andMe's successor, ignored known vulnerabilities and misled consumers about the breach's severity

Anadolu / Getty Images

California Attorney General Rob Bonta filed a lawsuit Thursday against Chrome Holding Co., the company formerly known as 23andMe, over a 2023 data breach that exposed the genetic and personal information of nearly 7 million users across the U.S., including 855,541 Californians.

The complaint, filed in San Francisco Superior Court, alleges that 23andMe failed to implement reasonable security measures, ignored known vulnerabilities in its systems, and misled consumers about the severity of the breach. The lawsuit says 23andMe's conduct violated California's Genetic Information Privacy Act, Reasonable Data Security Law, False Advertising Law, Unfair Competition Law, and the........

© Quartz