MDL TrackerData Breach

23andMe, Inc.

MDL No. 3098  ·  U.S. District Court for the Northern District of California
MDL No.
3098
Docket Type
Data Breach
Transferee Judge
Hon. Edward M. Chen
Centralized
2024-04-11
Actions Pending
41
As Of
2026-09-01
Funding Considerations

This docket consolidates claims arising from a 2023 data security breach at 23andMe, the consumer genetic-testing company, in which attackers used credential-stuffing techniques to access a subset of user accounts and then leveraged 23andMe's relative-matching features to expose genetic and genealogical data belonging to a much larger number of users connected to the compromised accounts. Centralized in the Northern District of California, the docket carries 41 pending actions, addressing a claim category involving an unusually sensitive category of exposed data: genetic and ancestry information.

For a funder, the sensitivity of genetic data is a distinguishing underwriting consideration relative to more conventional data-breach litigation involving financial or contact information — claims here may support damages theories tied to the unique, immutable, and family-implicating nature of genetic data, which several courts and commentators have treated as raising distinct privacy concerns. Diligence should also account for the breach's relative-matching mechanism, since many affected individuals were exposed not because their own account was directly compromised but because a genetically related user's account was.

As a data-privacy matter, medical-lien considerations do not apply notwithstanding the health-adjacent nature of genetic information. For a claimant group or firm with claims tied to this breach, Criterica Capital's commercial litigation finance line is the applicable structure, with diligence focused on whether the claimant was a directly compromised account holder or was exposed through the relative-matching feature, since that distinction may affect the applicable damages theory. A structural brief on this docket is available through Criterica Intelligence.

Frequently Asked Questions
What made the 23andMe breach distinctive?
+
Why does genetic data affect the damages analysis here?
+
Does it matter whether a claimant's own account was compromised?
+
What financing product fits a claim tied to this breach?
+

Pre-settlement funding is a non-recourse purchase of a portion of the proceeds of a pending legal claim — not a loan. If the case does not result in a recovery, nothing is owed. Rates, fees, and repayment terms are disclosed in full in the funding agreement, which the applicant’s attorney reviews before signing. Availability and terms vary by state.

Litigation structure and resolution-risk brief on Criterica Intelligence →
Holding 23andMe, Inc. claims or inventory?
Send the details and our institutional team will respond within one business day.