ICO Imposes 2.31 Million Pound Fine on 23andMe

Fine Imposed for Failing to Protect Genetic Data in the United Kingdom Akshaya Asokan (asokan_akshaya) • June 18, 2025

The British data regulator imposed a 2.31 million-pound fine against bankrupt genetics research firm 23andMe for "serious" privacy violations tied to the company's 2023 hack and data leak.

See Also: Does Office 365 Deliver The Email Security and Resilience Enterprises Need?

The fine, worth $3.1 million, is the outcome of an investigation led by the U.K. Information Commissioner's Office and the Office of the Privacy Commissioner of Canada. The agencies began their probe in 2024 after hackers breached the California company to access the personal details of 7 million 23andMe customers in the United Kingdom, the United States, and Canada. The attackers sold the data on underground forums.

The breach impacted 155,592 individuals in the U.K., the ICO said. Exposed data ...