Utah Attorney General joins 23andMe lawsuit objecting sale of private genetic data
Related video: 'Utah experts weigh in on sensitivity of DNA data after 23andMe files for bankruptcy'
SALT LAKE CITY () — The Utah Attorney General has joined other states in filing a lawsuit that could prevent 23andMe from selling their genetic data following bankruptcy earlier this year.
Utah Attorney General Derek Brown has joined a 'bipartisan coalition' of 27 attorneys general in filing a lawsuit against 23andMe, according to a press release from the Utah Attorney General's Office. According to the lawsuit, the company has collected Genotype Data from roughly 15 million people.
Earlier this year, in March, , and their CEO stepped down. The company went up for sale, causing many about private data that was maintained by the genetic profiling company.
The Utah Attorney General's Office recommended that Utahns before the sale. It reminded Utahns of their rights under the Utah Consumer Privacy and the Genetic Information Privacy Acts.
How to protect (and delete) your DNA data after 23andMe bankruptcy filing
The goal of this lawsuit is to 'prevent the company from selling Utahns' private genetic information to another company without their express consent,' the press release states. The company is reportedly planning to sell the genetic information it gathered through home DNA collection kits.
'Utahns entrusted 23andMe with their most personal genetic information, under the promise of privacy and protection. The company's intent to sell this data to the highest bidder is an egregious betrayal of that trust and will not be tolerated,' Katie Hass, Director of the Utah Division of Consumer Protection, is quoted in the release. 'Every consumer should have the right to decide how this intimate, personal, and unique data is handled going forward.'
The lawsuit argues that genetic information is 'immutable,' meaning that if it is 'stolen or misused, it cannot be replaced.' Consumers who have their genetic data used by a company they do not trust have no way to protect themselves or change that information.
'The States respectfully request that the Court (a) enter a declaratory judgment as to the issues set forth… prior to any sale; (b) and enter any further relief to which the Court finds is just,' the lawsuit concludes.
The other attorneys general joining the lawsuit are from the following states: Arizona, Colorado, Connecticut, the District of Columbia, Florida, Illinois, Kansas, Kentucky, Louisiana, Maine, Michigan, Minnesota, Missouri, New Hampshire, New Mexico, New York, North Carolina, Oklahoma, Oregon, Pennsylvania, South Carolina, South Dakota, Vermont, Virginia, Washington, West Virginia, and Wisconsin.
Farmington Bay volunteer honored with 'Birder of the Year' nomination after more than 20 years of service
Utah Attorney General joins 23andMe lawsuit objecting sale of private genetic data
Mountain View Corridor closing to all pass-through traffic for five weeks
BMW's new flagship SUV to debut in US
Los Angeles-area mayors demand that Trump administration stop stepped-up immigration raids
Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
WIRED
12 hours ago
- WIRED
Congress Demands Answers on Data Privacy Ahead of 23andMe Sale
Jun 12, 2025 12:08 PM House Democrats sent letters to the potential buyers of the genetic testing company, asking how they plan to protect customer genetic data under a change of ownership. US Reps. Alexandria Ocasio-Cortez and Jan Schakowsky on Thursday sent letters to the two potential buyers of troubled genetic testing firm 23andMe demanding details about consumer data privacy should either of them acquire the company. Signed by 20 other Democratic members of Congress, the letters were sent to Regeneron Pharmaceuticals and TTAM Research Institute, which have put forth separate bids to buy 23andMe. In the letters, they ask Regeneron and TTAM if they will continue to give customers the option to delete their data and withdraw consent for their data to be used in medical research. They also want to know if 23andMe's current policy of not sharing genetic data with law enforcement without a warrant will be upheld, and whether both entities intend to proactively notify 23andMe customers about the sale. After struggling for years to turn a profit, 23andMe filed for bankruptcy protection in March and put its assets up for sale. Shortly after, its CEO Anne Wojcicki resigned. Wojcicki had tried unsuccessfully to take the company private but her proposals were rejected by a special committee formed by 23andMe's board of directors. In May, biotech company Regeneron announced that it was named the successful bidder in a bankruptcy auction, offering $256 million to acquire 23andMe. 'We believe we can help 23andMe deliver and build upon its mission to help those interested in learning about their own DNA and how to improve their personal health, while furthering Regeneron's efforts to use large-scale genetics research to improve the way society treats and prevents illness overall,' said George Yancopoulos, cofounder and chief scientific officer of Regeneron, in a company statement last month. But after the auction closed, Wojcicki put in a bid of her own—offering $305 million through a newly formed nonprofit, TTAM Research Institute. The offer prompted a federal judge to reopen the sale process, and now both Regeneron and TTAM will have a chance to put in a final bid. Founded in 2006, 23andMe pioneered the field of personal genomics with its DNA test kits, which allow customers to learn about their ancestry, family connections, and certain medical risks after submitting a spit sample. Despite selling more than 12 million of its DNA testing kits, the company never achieved profitability and struggled to diversify its revenue streams after going public in 2021. In another blow to the company, a major data breach in 2023 exposed the personal data of millions of customers, including a leak that targeted users with Chinese and Ashkenazi Jewish heritage. The new owner of 23andMe would acquire its vast trove of genetic data, raising questions about how that data would be used. Under 23andMe's current policy, customers can choose to make their genetic data and other personal information available for medical research. They also have the option of deleting all of their data and directing 23andMe to destroy their saliva sample. The members of Congress who sent the letters on Thursday are seeking clarity from Regeneron and Wojcicki on whether they plan to continue those practices. The signees are also concerned about genetic data being shared with law enforcement and immigration authorities and the possibility of genetic and other personal data being used to train AI models. They're also asking Regeneron and TTAM to disclose a full list of all third parties who currently have access to 23andMe data and the steps both entities will take to ensure transparency of third-party access in the future. 23andMe previously had a multi-year research collaboration with pharma giant GlaxoSmithKline. The representatives are asking Regeneron and TTAM to respond by June 26. Wojcicki and 23andMe's interim CEO Joe Selsavage testified during a House Oversight Committee hearing this week on the privacy and national security concerns surrounding 23andMe's sale. During that hearing, Selsavage told lawmakers that 1.9 million people, or about 15 percent of its customer base, have asked for their genetic data to be removed from the company's servers since the company filed for bankruptcy protection in March. This week, more than two dozen states and the District of Columbia filed a lawsuit against 23andMe, arguing that the company cannot auction 15 million customers' highly sensitive personal genetic information without their consent or knowledge.
CNET
13 hours ago
- CNET
This 23andMe Data Breach Settlement Could Pay You Up to $10,000: Here's How
Hackers used a credential stuffing attack to gain access to 23andMe accounts in October 2023. Getty Images/Viva Tung/CNET If you have ever used 23andMe, there's a good chance you may be able to get paid as part of its massive data breach settlement, potentially as much as $10,000. Genetic testing company 23andMe was struck by a prolonged data breach that allowed hackers to gain personal data for about half of the company's 14 million customers. Since then, the company struggled, filing for bankruptcy in March 2025, and it was eventually acquired by Regeron. Now that the ownership situation has been settled, 23andMe has started to allow customers to file claims for their shares of the legal settlement related to the data breach. The San Francisco-based company, which allows people to submit genetic materials and get a snapshot of their ancestry, announced in October 2023 that hackers had accessed customer information in a data breach. As a result, a January 2024 lawsuit accused the company of not doing enough to protect its customers and not notifying certain customers with Chinese or Ashkenazi Jewish ancestry that their data had been targeted specifically. It later settled the lawsuit for $30 million. "We have executed a settlement agreement for an aggregate cash payment of $30 million to settle all US claims regarding the 2023 credential stuffing security incident," a 23andMe spokesman told CNET. "We continue to believe this settlement is in the best interest of 23andMe customers, and we look forward to finalizing the agreement." A few months after that decision, there's now an official method available to make a claim and potentially get paid by 23andMe, in some cases as much as $10,000. Keep reading to get all the details you need, and for more, find out why T-Mobile settlement checks have been delayed and discover whether you can claim a piece of Apple's Siri privacy settlement. How many people did the 23andMe data breach hit? The settlement could cover roughly 6.9 million 23andMe customers whose data was targeted. To qualify, 23andMe customers must also have been US residents as of Aug. 11, 2023. That 6.9 million number includes around 5.5 million customers of 23andMe's DNA Relatives profiles, which lets people find and connect with genetic relatives. The other 1.4 million people affected by the breach used another service known as Family Tree, which predicts a family tree based on the DNA users share with relatives, 23andMe said. How much money could I get from the settlement? At the top end, 23andMe has said it would pay out up to $10,000 with an "Extraordinary Claim" to each customer who can verify that they suffered hardships as a direct result of their information being stolen in the data breach that resulted in unreimbursed costs. This includes costs from "identity fraud or falsified tax returns," acquiring physical security systems, or receiving mental health treatment. Residents of Alaska, California, Illinois and Oregon who were affected by the data breach can also apply for a payment as part of the proposed settlement, since those states have genetic privacy laws with damages provisions. The payments for these individuals are expected to be around $100, depending on how many people file for them, a settlement document said. Also, a smaller subset of affected users whose personal health information was impacted by the breach will be able to apply for a payment of $100. Infographic: Gianmarco Chumbe/CNET. Photo:Will the 23andMe settlement include anything else? Beyond those payments, 23andMe will also offer impacted users three years of a security monitoring service called Privacy Shield, which filings described as providing "substantial web and dark web monitoring." How can I file a claim for the 23andMe settlement? In order to file a claim electronically, you can do so using this official online portal from the Kroll Restructuring Administration. An additional online form is available if you would like proof of your claim sent to you. Potential claimants can also download and print out hard copies of the claim form and proof of claim form if they wish to submit them by mail. If you plan to use this method, send your forms to one of the addresses listed on the claims website. The deadline to make a claim is July 14, 2025. For more, you can read about how class-action lawsuits work.
Yahoo
19 hours ago
- Yahoo
AG reminds NH residents of rights in 23andMe bankruptcy filing
The Attorney's General's Office says it has been keeping an eye on 23andMe as part of a multistate investigation into a data breach discovered in October 2023 that led to the exposure of nearly 7 million Americans. 23andMe, a direct-to-consumer genetic testing company that collects and analyzes individuals' genetic data, filed for bankruptcy protection in March. Attorney General John Formella said the company failed to safeguard the information of its customers and exposed them to significant harm. 'This negligence not only damaged the company's reputation but also violated the trust of those who entrusted their personal data to the company,' Formlla said in a news release. The office is reminding New Hampshire residents of their rights under the New Hampshire Data Privacy Act. New Hampshire consumers have the right to access, obtain, correct, and delete personal data collected about them. Additionally, consumers have the right to opt out of the processing of their personal data for the purposes of targeted advertising, the sale of personal data, and certain types of profiling, according to the news release. 'Despite the bankruptcy filing, both 23andMe and any potential buyers remain responsible for protecting consumer data," Formella said. 'Additionally, consumers can proactively protect their data by deleting their genetic data, requesting the destruction of their test sample, and revoking authorization for 23andMe to share their data with third-party researchers.' Consumers can delete their genetic data, request destruction of their test sample, and revoke permission for their data to be used for research through their 23andMe 'Account Settings' page. 23andMe's privacy notice can be found at this link: Consumers who need assistance may contact the New Hampshire Department of Justice, Consumer Protection and Antitrust Bureau at DOJ-CPB@ or 1-888-468-4454.
