Breached and Bankrupt, Act Now to Protect Your Genetic Data

23andMe's Bankruptcy & Data Sale

• 💡 23andMe filed for Chapter 11 bankruptcy on March 23, 2025, with plans to sell its assets, including the genetic data of 15 million users.
• 📉 This financial distress follows a 2023 data breach that exposed 6.9 million user profiles, encompassing sensitive ancestry and health information.
• 💰 The company's decline is also attributed to waning kit sales, a $30 million breach settlement, and a 40% staff reduction.

Risks of Genetic Data Exposure

• ⚠️ The court-supervised sale means user DNA is now an asset that could be acquired by various entities, such as pharma giants or data brokers.
• 🛡️ Federal privacy laws are shaky, and HIPAA does not apply to 23andMe as it operates as a consumer company, leaving user data vulnerable.
• 🚨 Potential risks include identity theft, blackmail, and the possibility of new owners sharing data with insurers or police without warrants.
• 👨‍👩‍👧‍👦 Even if you haven't used 23andMe, your genetic data is partially exposed if a relative's DNA is in their system.

Broader Implications for Organizations

• 🏢 The 23andMe breach serves as a stark warning for organizations about the severe aftermath of a serious data breach.
• 💸 The average cost of a data breach is $4.5 million, and many cyber insurance claims are denied due to misrepresentation.
• ⚖️ Concerns extend to client confidentiality for law firms, student records for universities, and donor trust for non-profits.

Immediate Actions to Protect Your Data

• 📥 Download your genetic data by logging into 23andMe, navigating to Settings, and saving your genetic file and desired reports as PDFs.
• 🗑️ Permanently delete your account by going to Settings, selecting Delete Data, and confirming the deletion via email.
• 🗣️ Spread awareness by informing family, friends, and employees about these critical steps to protect their genetic information.