Menu
HomeRecent verdictsAbout
https://www.engadget.com/2183454/california-ag-sues-23andme-data-breach/

California Sues 23andMe Over 2023 Data Breach That Affected 7 Million Users

engadget.comPublished 30 May 2026Checked 30 May 2026EN
TrueTrue
95%Evidence StrengthStrong evidence
10 supporting2 contradicting20 unrelated
Based on 32 sources12 official, 3 established, 17 other

"California Attorney General Rob Bonta has filed

Claims · 20
1Mostly True
California Attorney General Rob Bonta accused Chrome Holding Co. of failing to protect users’ sensitive information.
Why this verdict
Mostly true based on 3 relevant sources (evidence strength: 78%).
Evidence · 3 sources
oag.ca.govPrimarySupports
Press Releases | State of California - Department of Justice - CA.gov
“Attorney General Bonta Sues Chrome Holding Co., Formerly Known as 23andMe, Over 2023 Data Breach”
30 May 2026
bleepingcomputer.comUnverifiedSupports
California AG sues 23andMe over 2023 breach exposing health data
“California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co ... sensitive information of nearly 7 million ...”
30 May 2026
facebook.comUnverifiedSupports
23andMe failed to take basic steps to protect users' data ... - Facebook
“attorney-general-bonta-sues-chrome-holding-co-formerly-known-23andme-over-2023 ... sensitive information ...”
30 May 2026
2Unverified
Chrome Holding Co. is the company formerly known as 23andMe.
Why this verdict
No evidence sources found for this claim.
3True
Chrome Holding Co. is facing a lawsuit filed by California Attorney General Rob Bonta.
Why this verdict
Confirmed true by 6 relevant sources (evidence strength: 95%).
Evidence · 6 sources
oag.ca.govPrimarySupports
Attorney General Bonta Sues Chrome Holding Co., Formerly Known ...
“California Attorney General Rob Bonta today filed a lawsuit against Chrome Holding Co., formerly known as 23andMe, for failing to ...”
30 May 2026
bbc.comEstablishedSupports
California Attorney General to sue 23andMe over 2023 data breach
“California Attorney General Rob Bonta has said he will sue DNA testing firm Chrome Holding following a probe on Thursday, alleging its ...”
30 May 2026
oag.ca.govPrimarySupports
Press Releases | State of California - Department of Justice - CA.gov
“Attorney General Bonta Sues Chrome Holding Co., Formerly Known as 23andMe, Over 2023 Data Breach.”
30 May 2026
4Unverified
The lawsuit against Chrome Holding Co. is over a massive security breach in 2023.
Why this verdict
Unverified — only 1 relevant source(s) found.
Evidence · 1 source
engadget.comUnverifiedContradicts
California Sues 23andMe Over 2023 Data Breach That Affected 7 ...
“California AG Rob Bonta has sued 23andMe over the 2023 data breach that led to the sale of 7 million users' data on the dark web.”
30 May 2026
5Mostly False
The 2023 security breach compromised millions of people's sensitive data.
Why this verdict
Mostly false based on 1 relevant sources (evidence strength: 63%).
Evidence · 1 source
elibrary.mofaga.gov.npPrimaryContradicts
[PDF] Enacting Data Protection Law in Nepal
“One notable example is the 2023 breach of the Ramailo app database, which compromised the personal information of thousands of Nepali citizens, including their ...”
30 May 2026
6Unverified
California Attorney General Rob Bonta is accusing Chrome Holding Co. of misleading customers and failing to protect their sensitive personal information and genetic data related to their health, genetic predispositions and risk factors, biological relatives, ancestry and ethnicity.
Why this verdict
Unverified — only 1 relevant source(s) found.
Evidence · 1 source
abcnews.comUnverifiedSupports
23andMe accused of failing to protect user data in new lawsuit
“Attorney General Rob Bonta filed the lawsuit Thursday in San Francisco Superior Court against Chrome Holding Co., the corporate debtor name ...”
30 May 2026
7Unverified
The 2023 security incident affected 7 million users across the US, according to the lawsuit.
Why this verdict
No evidence sources found for this claim.
8Unverified
855,541 of the users affected by the 2023 security incident were California residents, according to the lawsuit.
Why this verdict
No evidence sources found for this claim.
9Unverified
23andMe offered customers DNA testing kits to find out their ancestral origins and genetic health risks.
Why this verdict
No evidence sources found for this claim.
10Unverified
23andMe admitted in 2023 that bad actors accessed users' accounts through credential stuffing.
Why this verdict
No evidence sources found for this claim.
11Unverified
The hacker in the 23andMe breach used credentials stolen in previous data breaches, including from an attack on MyHeritage.
Why this verdict
No evidence sources found for this claim.
12Unverified
MyHeritage is a genealogy website that 23andMe worked with.
Why this verdict
No evidence sources found for this claim.
13Unverified
California Attorney General Rob Bonta says that 23andMe was aware of the breach on MyHeritage but never checked or prevented users from reusing their credentials.
Why this verdict
No evidence sources found for this claim.
14Unverified
23andMe allegedly encouraged its users to sign up for a MyHeritage account.
Why this verdict
No evidence sources found for this claim.
15Unverified
Bad actors broke into 14,000 23andMe accounts using an attack method.
Why this verdict
No evidence sources found for this claim.
16Unverified
Bad actors exploited a vulnerability in 23andMe's DNA Relatives feature to access data from more customers.
Why this verdict
No evidence sources found for this claim.
17Unverified
California Attorney General Rob Bonta said 23andMe's security measures were so lax that hackers operated undetected inside its system for five months.
Why this verdict
No evidence sources found for this claim.
18Unverified
California Attorney General Rob Bonta said 23andMe only started investigating after bad actors had already started selling stolen user data on the dark web and demanding a ransom.
Why this verdict
No evidence sources found for this claim.
19Unverified
California Attorney General Rob Bonta accused 23andMe of omitting critical information when it informed customers about the breach.
Why this verdict
No evidence sources found for this claim.
20Unverified
California Attorney General Rob Bonta said 23andMe downplayed the sensitivity of the stolen data.
Why this verdict
No evidence sources found for this claim.
About this report. This is an automated analysis. Verdicts are based only on the evidence retrieved at the time of checking (30 May 2026 · 11:29). If you believe a relevant source was missed, an interpretation is wrong, or new evidence has emerged, request a correction below.