AG Jennings Announces Multistate Settlement of Bankruptcy Claims Agai…

23andMe settles multistate bankruptcy claims over a 2023 credential stuffing breach affecting 6.9 million customers, with 43 state AGs recovering $18m from limited bankruptcy assets; the company's genetic data assets were sold to TTAM Research Institute (founder Anne Wojcicki's non-profit) subject to enhanced data security and consumer deletion rights. If you're holding consumer genetic data, states will now chase you through bankruptcy for inadequate security — and the bar for 'inadequate' is now public: no password blocklists, no rate limiting, no MFA. Even asset sales to non-profits won't save you without explicit data governance in the sale terms.