July 20, 2026 – If you ever mailed off a DNA kit and wondered where that data could end up, Kansas’ attorney general says this settlement is a reminder that companies have to protect what they collect.

Attorney General Kris Kobach announced Monday that Kansas and a coalition of 42 states will receive $18 million in a settlement with genetic testing company 23andMe over a 2023 data breach that compromised the genetic data of 6.9 million customers worldwide.

Kansas’ share of the settlement is $225,814, according to Kobach’s office.

“Kansans trust companies like this to keep their information safe, and my office will fight to make sure they do,” Kobach said.

The breach came to light in October 2023, when 23andMe said it had discovered unauthorized access, including 51,449 Kansans. The exposed information included data later posted for sale on the dark web, the office said.

After the breach, attorneys general launched a multistate investigation and concluded 23andMe failed to take basic steps to prevent attacks and detect suspicious activity. Investigators also cited multiple additional security shortcomings.

Kobach’s announcement comes after 23andMe filed for bankruptcy protection in March 2025.

As part of the bankruptcy proceedings, the company’s consumer data were sold under terms that include enhanced security requirements, risk analysis, the addition of an advisory board, commitments to comply with comprehensive privacy laws, and continued consumer deletion rights, the office said.

Separately, 23andMe agreed to a $46.75 million class-action settlement in the bankruptcy case to provide relief to affected U.S. consumers who submitted claims by Feb. 17, 2026, the office said.

By Julia Scammahorn, KCTV 5
Read More Here