23andMe settles for $18 million over breach

42 state attorneys general reached an $18 million settlement with 23andMe for cybersecurity failures that exposed 6.9 million people's genetic ancestry data. The agreement requires new data protection measures from the 23andMe Research Institute, including risk assessments and a special board to oversee data security. Customers retain the right to delete their genetic samples and data indefinitely.