2026年5月28日 美国东部时间下午6:19 / 路透社
作者：乔纳森·斯坦普尔
- 加州指控23andMe忽视基因数据保护漏洞
- 总检察长邦塔寻求数百万美元罚款。
- 23andMe破产令追偿工作复杂化
2026年5月28日（路透社）——加利福尼亚州总检察长罗布·邦塔于周四起诉基因检测公司23andMe，原因是该公司2023年发生的数据泄露事件导致约690万美国客户的基因及其他个人信息遭到泄露。
在旧金山高等法院提交的起诉书中，加州指控23andMe无视其系统遭入侵的大量预警，并淡化此次数据泄露事件的严重程度。此次泄露暴露了客户的健康状况、遗传易感性、亲属信息、血统及族裔信息。
路透社伊朗简报新闻通讯将为您提供伊朗局势的最新动态与分析，点击此处订阅。
此次泄露始于2023年4月，持续了约五个月。邦塔表示，约85.6万加利福尼亚州民众受到影响。
“此次数据泄露事件及其公司的处理方式完全不可接受，”邦塔在与记者举行的电话会议上表示。
23andMe及其律师尚未立即回应置评请求。此次诉讼是针对Chrome控股公司提起的，该公司是23andMe的法定名称。
邦塔表示，他正在就23andMe违反加州《基因信息隐私法》和州消费者保护法的行为寻求总计“数百万美元”的民事罚款。
此次诉讼距23andMe在圣路易斯申请破产已有14个月，邦塔承认“我们需要通过破产程序来追讨任何判决赔偿”。
就在四个月前，负责监督23andMe破产案的联邦法官最终批准设立3000万至5000万美元的基金，用于解决该公司此次数据泄露事件中绝大多数美国客户的索赔诉求。
该和解协议同时解决了此前的指控：23andMe未告知拥有华裔和德系犹太血统的客户，黑客似乎曾针对性窃取他们的信息，并将这些信息在暗网出售。
总部位于加州帕洛阿尔托的23andMe成立于2006年，并于2021年上市。
该公司于2025年3月依据《美国破产法》第11章向债权人申请破产保护，理由包括数据泄露及相关诉讼、日益激烈的市场竞争以及基因检测产品需求下滑。
去年7月，由23andMe联合创始人安妮·沃西基控制的非营利组织TTAM研究所以3.05亿美元收购了23andMe的资产。
邦塔以隐私保护为由反对此次收购，称加州法律赋予消费者同意转移其“最敏感个人数据”的权利。他表示，相关诉讼仍在审理中。
乔纳森·斯坦普尔 纽约报道；丹尼尔·沃利斯 编辑
我们的报道准则：路透社信任原则。
California sues 23andMe over large 2023 data breach
May 28, 2026 6:19 PM UTC / Reuters
By Jonathan Stempel
Attendees visit the 23andMe booth at the RootsTech annual genealogical event in Salt Lake City, Utah, U.S., February 28, 2019. REUTERS/George Frey/File Photo Purchase Licensing Rights
- California alleges 23andMe ignored genetic data protection shortfalls
- Attorney General Bonta seeks millions of dollars in fines.
- 23andMe bankruptcy complicates potential recovery
May 28 (Reuters) – The genetics testing company 23andMe was sued on Thursday by California Attorney General Rob Bonta, over a 2023 data breach that exposed genetic and other personal information of an estimated 6.9 million U.S. customers.
In a complaint filed in San Francisco Superior Court, California accused 23andMe of ignoring numerous warnings that its systems had been compromised and downplaying the severity of the data breach, which exposed information about customers’ health, genetic predispositions, biological relatives, ancestry and ethnicity.
The Reuters Iran Briefing newsletter keeps you informed with the latest developments and analysis of the Iran war. Sign up here.
The breach began in April 2023 and lasted about five months. Bonta said about 856,000 Californians were affected.
“This data breach, and the company’s handling of it, was entirely unacceptable,” Bonta said in a conference call with reporters.
Neither 23andMe nor its lawyers immediately responded to requests for comment. The lawsuit was filed against Chrome Holding Co, the legal name for 23andMe.
Bonta said he is seeking civil fines that could total “multiple millions” of dollars for violations of California’s Genetic Information Privacy Act and state consumer protection laws.
The lawsuit came 14 months after 23andMe filed for bankruptcy in St. Louis, and Bonta acknowledged “we would need to work through the bankruptcy (process) to collect any judgment.”
California sued four months after the federal judge overseeing 23andMe’s bankruptcy granted final approval for a $30 million to $50 million fund to resolve most U.S. customer claims from the data breach.
That settlement also resolved accusations that 23andMe did not tell customers with Chinese and Ashkenazi Jewish ancestry that the hacker appeared to have targeted them, and offered their information for sale on the dark web.
Based in Palo Alto, California, 23andMe was founded in 2006 and went public in 2021.
It filed for Chapter 11 protection from creditors in March 2025, citing the data breach and related litigation, as well as increased competition and falling demand for genetics testing products.
Last July, TTAM Research Institute, a nonprofit controlled by 23andMe co-founder Anne Wojcicki, bought 23andMe’s assets for $305 million.
Bonta opposed that sale on privacy grounds, saying California law gave consumers a right to consent to any transfer of their “most sensitive personal data.” He said that challenge remains pending.
Reporting by Jonathan Stempel in New York; Editing by Daniel Wallis
Our Standards: The Thomson Reuters Trust Principles.
发表回复