Tuesday March 25, 2025

Update: 23andMe has filed for bankruptcy.

Last May, I wrote about the 23andMe data breach and the concerns it raised about the security of genetic information. At the time, the issue was clear: a breach had exposed customer data, leaving many to question how well these companies protect some of our most personal information.

Next, I wrote about what could happen if the company couldn’t get back on financial sound footing here.

Now, a new warning has emerged—not about another breach, but about the company’s financial future. California Attorney General Rob Bonta recently issued a consumer alert, cautioning that 23andMe may be facing serious financial instability. The concern? The company could be forced to sell off assets, and those assets could include consumer data.

For those who have used 23andMe, this raises an unsettling question: What happens to your genetic information if the company changes hands? While 23andMe’s policies have stated that they do not sell individual genetic data, a sale of the company itself—or portions of its database—could shift that reality. Given this uncertainty, the Attorney General is advising consumers to take action now:

  • Delete your records within 23andMe
  • If you elected to have 23andMe store your DNA sample, request that they destroy it
  • You can also withdraw your consent of any future use of your genetic data and sample for research.

This isn’t just a story about one company’s financial troubles. It’s a wake-up call about how we think about privacy in an era where personal data is a commodity. Many signed up for 23andMe to learn more about their ancestry, health risks, or family connections—never considering that their genetic profile might one day be an asset on the auction block.

It’s worth asking: If a company holding your most personal information was in financial trouble, what would you do? Some people may feel comfortable leaving their data where it is, while others may decide it’s time to take control and delete it. Either way, this is a reminder that our digital footprints—whether passwords, browsing histories, or even DNA—can outlive the companies that collect them.

Until Next Time,

Mary Schuster
Chief Knowledge Officer
October Research, LLC