Last updated
23andMe: Cybersecurity Incident
23andMe's successor agreed to pay $6 million to California to settle allegations it failed to properly protect customer data before a 2023 breach.
- What happened
- 23andMe's successor agreed to pay $6 million to California to settle allegations it failed to properly protect customer data before a 2023 breach.
- Who
- 23andMe · USA
- When
- 2026-10-20
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For 23andMe in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: The wider read — a Talent Market Index of 122.7 (Hot), up 17.8 month-on-month — shows Americas signal flow rising (+34.4pts).
23andMe: 1 signal in the last 90 days; 3 tracked across 153 days.
MitchelLake in this thematic
Also at 23andMe →
More signals across Americas
Cybersecurity Incident · Americas
Paradigm Healthcare Services →Paradigm Healthcare Services suffered an intrusion detected in October 2025 that exposed data of about 970,000 Medi-Cal members; notifications to individuals were delayed by nearly a year.
Cybersecurity Incident · Americas
Educational Testing Service (ETS) →Assessment contractor Educational Testing Service suffered a months-long data breach. The California Department of Education has warned all public school students that their data was stolen.
Cybersecurity Incident · Americas
Conduent →Conduent agreed to pay $80m to settle a class action over its 2024 cyber incident, which affected healthcare data of about 62 million people.
Cybersecurity Incident · Americas
Staples →Hackers accessed Staples' internal customer-support system and used active employee sessions to issue more than 15,000 gift cards worth over $5 million; about $425,000 in redeemed cards traced to the breach.
Cybersecurity Incident · Americas
Brightmoor Hospice, LLC →Brightmoor Hospice, LLC of Griffin, Georgia is notifying of a data security incident that may have exposed protected health information. It discovered suspicious activity around March 25, 2026, and public notification came October 16, 2026.
Cybersecurity Incident · Americas
Anne Arundel County, Maryland →Anne Arundel County, Maryland confirmed an August data breach after ransomware claims; an intruder stole files from government systems and the scope of exposed data is still being assessed.
Where this lands in our work
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗