Privacy Unpacked- Status
- Confirmed breach
- People affected
- 855,000 Californians
- Reported
- 19 October 2026
What was exposed
- Genetic information
Confirmed breach
23andMe data breach
USUnited States
The Guardian reported a data breach at 23andMe (United States) on 19 October 2026, and it has been confirmed. It affected 855,000 Californians. Exposed: Genetic information.
If 23andMe had your data
- Look for 23andMe’s own notice or letter: it should say what of yours was involved. Keep it.
- Expect scams that use your details: calls, texts or emails pretending to be 23andMe, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Earlier breaches at 23andMe
From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.
More breaches in United States
- Johns Hopkins Bayview Medical Center Health and medical informationFinancial account and card detailsAdmission dates+3 3.1Kpatients
- Monmouth University Social Security numbersGovernment ID numbersHealth and medical information+2 346Vermont residents
- Frontline Education Social Security numbers 3KVermont residents
- USForex –not reported
- Alpha Omega Alpha Honor Medical Society Financial account and card details 12Vermont residents
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.