Oklahoma · verified official-source register

Oklahoma Privacy Enforcement Cases

1 verified case record from the authoritative 50-state register. The fields below preserve the supplied amount, date, legal basis and explanation of why the action was brought.

1 official case source link · state register dated August 31, 2026

Actual case links

Oklahoma case register

Each record links directly to the official Attorney General or state-agency source supplied for this register. Shared multistate amounts are reproduced as stated and should not be summed as unique state penalties.

Verified case 1 of 1

23andMe

Date
2026-07-16
Amount
$276,435 to Oklahoma; $150 million in total claims, with actual payouts limited to $18 million because of limited bankruptcy-estate funds; separately, $46.75 million to settle a related class-action lawsuit
Legal basis
No statutes or laws cited in the document.

Why the action was brought

23andMe’s 2023 breach exposed genetic and personal data, including genetic ancestry information, of 6.9 million customers, including more than 78,000 Oklahomans; subsets were published for sale on the dark web. Investigators found failures to check passwords against known-stolen lists, require extra verification, monitor suspicious logins, and fix known security weaknesses.

View Official Case Source ↗ (opens in a new tab)

Source data is based on verified concluded privacy, data-breach and data-security enforcement actions located on official state Attorney General or state-agency sources. Multistate settlement amounts are reproduced as stated by the official source and should not be summed as unique state penalties.

Educational information, not legal advice.

Back to OklahomaAll states