23andMe successor settles with California for $6 million over cybersecurity failings
California's $6M settlement with the 23andMe successor entity signals that cybersecurity liabilities survive corporate restructuring — a precedent European acquirers should note when evaluating M&A targets.
Summary written by editorial AI · Source link below
California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did not properly protect customers' data before a 2023 breach.
Editorial Analysis
The case establishes that acquiring a company means acquiring its unresolved cybersecurity liabilities, directly relevant for European firms conducting cross-border M&A.
Include inherited breach exposure and regulatory settlement risk in your cyber due-diligence checklist for acquisitions.
A $6M settlement proves cybersecurity liabilities transfer to successor companies — factor this into acquisition decisions.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at The Record in a new tab.
More from the Compliance Desk
- Medical services company settles with 4 states over 2023 hack of sensitive patient records3d
- 3 Frameworks to Protect CISOs & Orgs Against AI Liability27 Oct
- Developing Security Metrics for Automated Compliance Checking26 Oct
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads24 Oct
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators20 Oct