Louisiana · verified official-source register

Louisiana Privacy Enforcement Cases

1 verified case record from the authoritative 50-state register. The fields below preserve the supplied amount, date, legal basis and explanation of why the action was brought.

1 official case source link · state register dated August 31, 2026

Actual case links

Louisiana case register

Each record links directly to the official Attorney General or state-agency source supplied for this register. Shared multistate amounts are reproduced as stated and should not be summed as unique state penalties.

Verified case 1 of 1

23andMe

Date
not stated in the official release
Amount
$46.75 million class-action settlement; $150 million in allowed claims for states; recovery limited to $18 million; Louisiana will receive $258,668
Legal basis
None stated

Why the action was brought

The 2023 credential-stuffing breach compromised genetic and other customer data of 6.9 million consumers worldwide, including 68,814 Louisianans; some data was sold on the dark web. Investigators found unreasonable security practices, including inadequate safeguards, rate limiting, monitoring, investigation of unusual logins, vulnerability remediation, and testing, causing unauthorized exposure.

View Official Case Source ↗ (opens in a new tab)

Source data is based on verified concluded privacy, data-breach and data-security enforcement actions located on official state Attorney General or state-agency sources. Multistate settlement amounts are reproduced as stated by the official source and should not be summed as unique state penalties.

Educational information, not legal advice.

Back to LouisianaAll states