PA Attorney General joins lawsuit to stop 23andMe's sale of customer data
PENNSYLVANIA (WTAJ) — Following the filing of bankruptcy by 23andMe and their intent to potentially sell consumer data, PA Attorney General Dave Sunday announced on Wednesday, June 11, his office is joining a bipartisan group of 28 Attorney Generals from across the country to file a lawsuit to block the sale.
23andMe, a popular DNA testing company, filed for bankruptcy in March 2025 and is now looking to sell off its assets by auction. Those assets would include sensitive genetic and health data of its customers.
'The millions of consumers — including many Pennsylvanians — who paid for these services certainly did not expect their sensitive data to one day be sold off to a highest bidder,' Attorney General Sunday said. '23andMe is trying to avoid their legal obligations to consumers simply by labeling this sale and transfer of consumer data as a 'change of ownership.' I continue to encourage 23andMe customers to consider deleting their data from the company's database.'
The lawsuit, filed in federal bankruptcy court on June 9, objects to the bankruptcy sale of the personal information that 23andMe collected and aims to stop the auctioning of it to the highest bidder. The argument is that this kind of information, such as biological samples, DNA data, and medical records, is too sensitive to be sold without every customer's consent and could potentially be used in ways that they were never informed of when they initially signed up for 23andMe.
Pennsylvania joins attorneys general from states like Arizona, Florida, New York, and West Virginia in the lawsuit.
Impacted consumers have until July 14, 2025, to file a proof of claim electronically and can submit a complaint to the Bureau of Consumer Protection or call the hotline at (800) 441-2555.
Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
WIRED
6 hours ago
- WIRED
Congress Demands Answers on Data Privacy Ahead of 23andMe Sale
Jun 12, 2025 12:08 PM House Democrats sent letters to the potential buyers of the genetic testing company, asking how they plan to protect customer genetic data under a change of ownership. US Reps. Alexandria Ocasio-Cortez and Jan Schakowsky on Thursday sent letters to the two potential buyers of troubled genetic testing firm 23andMe demanding details about consumer data privacy should either of them acquire the company. Signed by 20 other Democratic members of Congress, the letters were sent to Regeneron Pharmaceuticals and TTAM Research Institute, which have put forth separate bids to buy 23andMe. In the letters, they ask Regeneron and TTAM if they will continue to give customers the option to delete their data and withdraw consent for their data to be used in medical research. They also want to know if 23andMe's current policy of not sharing genetic data with law enforcement without a warrant will be upheld, and whether both entities intend to proactively notify 23andMe customers about the sale. After struggling for years to turn a profit, 23andMe filed for bankruptcy protection in March and put its assets up for sale. Shortly after, its CEO Anne Wojcicki resigned. Wojcicki had tried unsuccessfully to take the company private but her proposals were rejected by a special committee formed by 23andMe's board of directors. In May, biotech company Regeneron announced that it was named the successful bidder in a bankruptcy auction, offering $256 million to acquire 23andMe. 'We believe we can help 23andMe deliver and build upon its mission to help those interested in learning about their own DNA and how to improve their personal health, while furthering Regeneron's efforts to use large-scale genetics research to improve the way society treats and prevents illness overall,' said George Yancopoulos, cofounder and chief scientific officer of Regeneron, in a company statement last month. But after the auction closed, Wojcicki put in a bid of her own—offering $305 million through a newly formed nonprofit, TTAM Research Institute. The offer prompted a federal judge to reopen the sale process, and now both Regeneron and TTAM will have a chance to put in a final bid. Founded in 2006, 23andMe pioneered the field of personal genomics with its DNA test kits, which allow customers to learn about their ancestry, family connections, and certain medical risks after submitting a spit sample. Despite selling more than 12 million of its DNA testing kits, the company never achieved profitability and struggled to diversify its revenue streams after going public in 2021. In another blow to the company, a major data breach in 2023 exposed the personal data of millions of customers, including a leak that targeted users with Chinese and Ashkenazi Jewish heritage. The new owner of 23andMe would acquire its vast trove of genetic data, raising questions about how that data would be used. Under 23andMe's current policy, customers can choose to make their genetic data and other personal information available for medical research. They also have the option of deleting all of their data and directing 23andMe to destroy their saliva sample. The members of Congress who sent the letters on Thursday are seeking clarity from Regeneron and Wojcicki on whether they plan to continue those practices. The signees are also concerned about genetic data being shared with law enforcement and immigration authorities and the possibility of genetic and other personal data being used to train AI models. They're also asking Regeneron and TTAM to disclose a full list of all third parties who currently have access to 23andMe data and the steps both entities will take to ensure transparency of third-party access in the future. 23andMe previously had a multi-year research collaboration with pharma giant GlaxoSmithKline. The representatives are asking Regeneron and TTAM to respond by June 26. Wojcicki and 23andMe's interim CEO Joe Selsavage testified during a House Oversight Committee hearing this week on the privacy and national security concerns surrounding 23andMe's sale. During that hearing, Selsavage told lawmakers that 1.9 million people, or about 15 percent of its customer base, have asked for their genetic data to be removed from the company's servers since the company filed for bankruptcy protection in March. This week, more than two dozen states and the District of Columbia filed a lawsuit against 23andMe, arguing that the company cannot auction 15 million customers' highly sensitive personal genetic information without their consent or knowledge.
Yahoo
7 hours ago
- Yahoo
The average cost of fast food in Pennsylvania
(WTAJ) — As fast food prices have surged well above the country's inflation rate, many consumers wonder if stopping for dinner on the way home is even worth it. According to a WalletHub study, the average price of fast food has risen 47 percent over the past decade. Value menus at fast food chains have become less and less of a value, and when COVID-19 was surging, 'value' menus were becoming increasingly harder to find. Mississippi sits at the top of the list for money spent on fast food relative to the state's median income, while Massachusetts and New Jersey tie at the bottom. The amount of money Pennsylvanians spend on fast food is relatively low by comparison. In fact, WalletHub ranks the Commonwealth at number 35. According to the study, compared to median monthly household income, Pennsylvanians spend roughly 0.35 percent on fast food. The average cost of fast food in the Keystone State (a burger, an 11 to 12-inch pizza and a fried chicken sandwich) is $22.34. Pennsylvania ranks number 31 for the average price of a burger, 41 for the pizza, and 19 for the fried chicken compared to other states, WalletHub added. It's important to note, these average prices are in-store and do not include delivery or service fees. Apps such as DoorDash and Uber Eats can quickly inflate your cost with fees and driver WalletHub says the average increase is 47 percent across the country, that's just for the burger, pizza and chicken sandwich. A deeper look into a graph by Crews Bank & Trust looks at a bigger fast food picture. When it comes to price increases, McDonald's leads the way nationally with a 100 percent increase since 2014, according to a May 2024 chart. The biggest culprit? The McChicken sandwich, which they said was just $1 in 2014 and is now over $3 at many stores — a more than 200 percent price increase. On the other end, Crews Bank & Trust claims Starbucks and Subway are at the lower end of the decade-long inflation at 39 percent. For those who may be wondering, the super popular Taco Bell is at 81 percent. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
CNET
7 hours ago
- CNET
This 23andMe Data Breach Settlement Could Pay You Up to $10,000: Here's How
Hackers used a credential stuffing attack to gain access to 23andMe accounts in October 2023. Getty Images/Viva Tung/CNET If you have ever used 23andMe, there's a good chance you may be able to get paid as part of its massive data breach settlement, potentially as much as $10,000. Genetic testing company 23andMe was struck by a prolonged data breach that allowed hackers to gain personal data for about half of the company's 14 million customers. Since then, the company struggled, filing for bankruptcy in March 2025, and it was eventually acquired by Regeron. Now that the ownership situation has been settled, 23andMe has started to allow customers to file claims for their shares of the legal settlement related to the data breach. The San Francisco-based company, which allows people to submit genetic materials and get a snapshot of their ancestry, announced in October 2023 that hackers had accessed customer information in a data breach. As a result, a January 2024 lawsuit accused the company of not doing enough to protect its customers and not notifying certain customers with Chinese or Ashkenazi Jewish ancestry that their data had been targeted specifically. It later settled the lawsuit for $30 million. "We have executed a settlement agreement for an aggregate cash payment of $30 million to settle all US claims regarding the 2023 credential stuffing security incident," a 23andMe spokesman told CNET. "We continue to believe this settlement is in the best interest of 23andMe customers, and we look forward to finalizing the agreement." A few months after that decision, there's now an official method available to make a claim and potentially get paid by 23andMe, in some cases as much as $10,000. Keep reading to get all the details you need, and for more, find out why T-Mobile settlement checks have been delayed and discover whether you can claim a piece of Apple's Siri privacy settlement. How many people did the 23andMe data breach hit? The settlement could cover roughly 6.9 million 23andMe customers whose data was targeted. To qualify, 23andMe customers must also have been US residents as of Aug. 11, 2023. That 6.9 million number includes around 5.5 million customers of 23andMe's DNA Relatives profiles, which lets people find and connect with genetic relatives. The other 1.4 million people affected by the breach used another service known as Family Tree, which predicts a family tree based on the DNA users share with relatives, 23andMe said. How much money could I get from the settlement? At the top end, 23andMe has said it would pay out up to $10,000 with an "Extraordinary Claim" to each customer who can verify that they suffered hardships as a direct result of their information being stolen in the data breach that resulted in unreimbursed costs. This includes costs from "identity fraud or falsified tax returns," acquiring physical security systems, or receiving mental health treatment. Residents of Alaska, California, Illinois and Oregon who were affected by the data breach can also apply for a payment as part of the proposed settlement, since those states have genetic privacy laws with damages provisions. The payments for these individuals are expected to be around $100, depending on how many people file for them, a settlement document said. Also, a smaller subset of affected users whose personal health information was impacted by the breach will be able to apply for a payment of $100. Infographic: Gianmarco Chumbe/CNET. Photo:Will the 23andMe settlement include anything else? Beyond those payments, 23andMe will also offer impacted users three years of a security monitoring service called Privacy Shield, which filings described as providing "substantial web and dark web monitoring." How can I file a claim for the 23andMe settlement? In order to file a claim electronically, you can do so using this official online portal from the Kroll Restructuring Administration. An additional online form is available if you would like proof of your claim sent to you. Potential claimants can also download and print out hard copies of the claim form and proof of claim form if they wish to submit them by mail. If you plan to use this method, send your forms to one of the addresses listed on the claims website. The deadline to make a claim is July 14, 2025. For more, you can read about how class-action lawsuits work.
