23andMe pays $18 M settlement, faces strict new data‑security rules
A coalition of 42 state attorneys general secured an $18 million payout from 23andMe after a 2023 breach exposed the genetic data of 6.9 million customers. The deal forces the company to adopt robust safeguards—multifactor authentication, intrusion detection, and breach monitoring—to protect users going forward.