23andMe’s Bankruptcy — What Customers Need to Know and Do NOW
The shocking news that 23andMe has filed for bankruptcy and ousted its CEO, Anne Wojcicki, has sent ripples through the biotech and consumer genetics world. But beyond the headlines, there’s a much bigger question every 23andMe customer should be asking:
👉 What happens to my DNA data now?
Let’s break down what’s happening — and what you need to do to protect yourself.
⚠️ The 23andMe Collapse
On March 24, 2025, 23andMe officially filed for bankruptcy, with plans for Wojcicki and a group of bidders (including her ex-husband) to try to buy the company back.
The problem?
If that bid fails, your genetic and personal data could be sold to whoever buys the company — possibly even a foreign firm with weaker privacy laws.
And remember: this isn’t just your name or email address.
23andMe holds your DNA, ancestry, and genetic health information — data that can’t ever truly be “changed.”
💻 A History of Data Problems
This isn’t 23andMe’s first crisis.
In 2023, the company suffered a massive data breach, affecting nearly 7 million customers (almost half its user base).
The breach resulted in a $30 million settlement, exposing how vulnerable genetic data can be when companies don’t invest in security.
Now, with bankruptcy in play, that same sensitive data could be sold or transferred to the highest bidder.
And yes — that’s legal. Under 23andMe’s own privacy policy, your genetic data can be transferred or sold as part of a bankruptcy sale.
🧬 Why This Matters: DNA Is Forever
Most of us have shared some kind of personal data online — but DNA data is on another level.
Unlike a password or credit card number, you can’t change your DNA.
It’s not just about you — it’s about your entire family lineage. A single cousin’s data could reveal health or ancestry details about dozens of relatives who never gave consent.
That’s why cybersecurity experts and even California’s Attorney General are urging customers to take action.
🧑⚖️ The Attorney General’s Consumer Alert
California Attorney General Rob Bonta issued a formal warning to all 23andMe customers, reminding them of their legal right to delete their genetic data under the Genetic Information Privacy Act and the California Consumer Privacy Act (CCPA).
Here’s how to delete your data:
Log into your 23andMe account.
Go to Settings → 23andMe Data → View.
Download your data (if you want a copy).
Scroll down to Permanently Delete Data → Click it.
Confirm via the email 23andMe sends you.
(Optional) Revoke consent for your data to be used in research.
You can also request that your DNA samples be destroyed.
🧩 Real-World Lessons in Data Security
This situation isn’t unique.
In 2017, Canadian retailer NCIX went bankrupt and unknowingly sold 13 terabytes of unencrypted customer data — including credit card info and photo IDs — on Craigslist.
If it happened to them, it can happen again.
The lesson?
When companies go under, their customer data often becomes a business asset — one that can be sold, transferred, or exposed.
🧠 What Small Business Owners Can Learn
If you run a business — big or small — there’s an urgent takeaway here:
Protect your customers’ data like it’s your own.
That means:
Regular security audits
Understanding your local data protection laws
Getting cyber liability insurance
Encrypting everything — always
Ignorance isn’t an excuse anymore. Consumers are starting to hold companies accountable for how they protect (or fail to protect) personal information.
🧭 The Bigger Picture
Experts warn that if 23andMe’s assets — including genetic data — are sold to another company, the buyer could use it for anything from marketing to insurance risk profiling.
One cybersecurity expert told KPRC News:
“My fear is people being denied life insurance because a company knows too much about their DNA.”
That’s not science fiction — it’s a real, growing concern in the era of big data and bioinformatics.
🔒 Final Thoughts: Your DNA Is Priceless
If you’ve ever used 23andMe, the time to act is now:
Delete your data.
Revoke your consent.
Protect what’s uniquely yours — your DNA.
And if you’re a business owner, let this be a wake-up call:
In today’s digital economy, trust is currency — and once it’s lost, you can’t buy it back.