North Carolina residents have until July 14, 2025, to file general claims against DNA testing company 23andMe or claims specifically related to a cybersecurity incident reported in 2023. This deadline comes as the company, which recently filed for bankruptcy protection, has now been acquired.

Attorney General Jeff Jackson's office was investigating 23andMe over the data breach when the company initiated bankruptcy proceedings. On Monday, May 19, 2025, Regeneron Pharmaceuticals, Inc., a biotechnology company, announced it was the successful bidder in a bankruptcy auction to acquire substantially all of 23andMe's assets for $256 million. This acquisition, which is subject to bankruptcy court and regulatory approvals, is expected to close in the third quarter of 2025. Regeneron has stated its intention to maintain 23andMe's consumer genetics business and prioritize the privacy and security of customer data.

“Your genetic data is the most personal information you have, and 23andMe’s data breach may have put that information in the wrong hands,” said Attorney General Jeff Jackson. “I’m continuing to monitor the company’s bankruptcy and sale to make sure they protect consumers’ personal information. If you were impacted by the data breach, please consider filing a claim.”

The data breach, which occurred in October 2023, potentially compromised the private genetic information of millions of individuals. North Carolinians are eligible to file a claim if they meet the following criteria:

• Were a 23andMe customer between May 1, 2023, and October 1, 2023.

• Received notice that their personal information was compromised in the breach.

• Suffered from financial damages or other non-financial harms as a result of the breach.

Claims related to the data breach can be filed here. General claims against 23andMe can be filed here.

As part of his investigation into 23andMe, Attorney General Jackson previously secured a consent order for the appointment of a consumer privacy ombudsman. This ombudsman will continue to advocate for consumers’ privacy and security interests as 23andMe navigates its new ownership under Regeneron.