Consumer alert: 23andMe hit with $18 million penalty after massive DNA data breach

23andMe was fined $18 million by a coalition of 42 attorneys general, including New York's Letitia James, for failing to protect customer genetic data in a 2023 breach affecting 300,000 New Yorkers. The settlement mandates new security measures and includes $705,000 paid to New York, following findings that the company neglected basic cybersecurity protocols.