The payments from 23andMe’s $46.75 million data breach settlement have gone out. The claims administrator says every submitted claim has now been reviewed and that payments for approved claims were issued September 29 and 30, 2026. That ends a wait of nearly three years for people whose genetic and personal data was exposed in the October 2023 breach. The money is also smaller than the company’s bankruptcy deal first allowed, and what each person receives depends on which of the settlement’s claim types was approved.
What the court approved and what shrank
The breach hit about 6.4 million U.S. residents, according to the settlement site, and 6.9 million customers worldwide, according to Connecticut Attorney General William Tong’s office. Attackers used credential stuffing, which means trying passwords stolen from other websites until some of them worked on 23andMe accounts. Tong said the company “collected the most sensitive genetic data imaginable from millions of Americans, and they failed to safeguard that data.”
The consumer settlement was approved inside a bankruptcy case. 23andMe filed for Chapter 11 in March 2025, and its consumer assets were later sold to a research institute founded by former chief executive Anne Wojcicki. Judge Brian C. Walsh of the U.S. Bankruptcy Court for the Eastern District of Missouri then allowed a deal worth $46.7 million, which Bloomberg Government reported was $3.25 million below the $50 million cap the court had set earlier. The settlement site gives the final figure as $46.75 million and dates the court’s final amount to July 7, 2026.
People who filed a claim and cannot find a deposit should first confirm that the claim was approved and that the payment details on file are current, since the administrator pays only approved claims and only to the details provided. A health information claim, for example, can be held up if payment information was never supplied.
Keeping a dated record of the claim number, the amount expected and each message from the administrator makes a missing payment much easier to raise. The Settlement & Refund Recovery System includes a claim log and payment tracker built for that job.
Get the claim log and payment tracker for a 23andMe payment →
A second pool of money is far shorter than its claims. Tong’s office said 42 states led by Connecticut and Indiana won an allowed state claim of $150 million in the bankruptcy, but only about $18 million was available to pay it. Connecticut’s share is $887,729. That sum is separate from the consumer class settlement, so approved class members are not paid out of the state recovery.
How approved claims were sorted and paid
The settlement site lists four kinds of benefit. Extraordinary claims for documented losses carry up to $10,000. Health information claims carry up to $165. Statutory cash claims are estimated at $100 for residents of states with their own genetic privacy laws. All class members could also receive five years of Privacy and Medical Shield plus genetic monitoring. Final cash amounts can differ from these figures because the money is divided among everyone approved in each group.
The deadlines that decided who is in the payment round passed months ago. Claims closed February 17, 2026, and people whose forms had problems had until June 12, 2026 to submit a deficiency cure form. The administrator, Kroll Settlement Administration, then reviewed the full set. The settlement site states plainly that all submitted claims were reviewed before the late September payments, which means anyone who filed on time and was approved should now have been paid.
The site does not say how many claims were approved or how much went to each category. It also does not publish a count of denied claims. For a person who filed, the practical consequence is that a payment is either reflected in the account used for the claim or it is not, and the next question is why.
Why amounts differ from claim to claim
The settlement was built as a set of tiers because the harm from the breach was uneven. Someone whose data included health information, or who could document identity theft or fraud tied to the breach, stood to receive more than a member whose only injury was exposure. State law adds another split. The statutory cash payment is limited to residents of states with their own protections, which is why two people with identical breach notices can receive different amounts.
The reduction from $50 million to $46.75 million also shows how a bankruptcy settlement differs from an ordinary class action. The money comes from the bankruptcy estate, which owes other creditors, and the judge had to find the deal “fair, equitable, and in the best interests of the trust set up to pay data-breach claimants.” That language, quoted by Bloomberg Government, explains why the final sum sits inside a court-set range rather than being a number the company negotiated freely.
For people tracking a payment, the order of events matters. Final approval of the class settlement is dated January 30, 2026 on the settlement site, the bankruptcy court approved the final amount on July 7, and Kroll issued payments in the last two days of September. A claim that was approved but still shows nothing after several weeks is the case to raise with the administrator.
Chasing a 23andMe payment that has not arrived
The free route runs through the official settlement website, which carries a contact form and the administrator’s details. Kroll can also be reached by phone at (833) 621-5792 or by mail at 23andMe, c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391. The administrator, not 23andMe and not any outside company, is the party that holds the claim file and can confirm whether a payment was issued.
A useful contact includes the claim number, the claim type that was filed, the email address used and the date the payment was expected, which in this case is September 29 or 30. The settlement’s own amounts give a way to judge a deposit: about $100 for a statutory cash claim, up to $165 for health information, and up to $10,000 for documented extraordinary losses. A deposit far from the claimed tier is worth asking about in writing.
Messages about the payment should come only through the settlement site or the administrator’s published contacts. Anyone asking for a fee, a password or a Social Security number to release a 23andMe settlement payment is not part of the process described on the settlement site. Because the breach itself exposed personal data, the follow-up scams are a real risk, and the safest check is to go to the settlement site directly rather than through a message.
The Settlement & Refund Recovery System pairs a claim log and payment tracker with instructions on how to get an expired or uncashed settlement check reissued, which covers both a payment that never showed up and one that was not cashed in time.
Get the payment tracker for the 23andMe payout in The Settlement & Refund Recovery System →
This article was produced with AI assistance and reviewed by The Money Overview’s editorial team.
