Last week, California-based genetic testing company 23andMe announced that it is filing for Chapter 11 bankruptcy protection. This major development comes in the context of larger privacy tides. This decision comes on the heels of a massive data breach. In early October 2023, hackers were able to breach the system and almost 7 million clients’ information was exposed. The breach has led to heightened scrutiny, particularly around the company’s treatment of sensitive genetic data.
California Attorney General Rob Bonta recently released a consumer alert warning Californians to remove their genetic information from 23andMe.
"Given 23andMe's reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company," – California Attorney General Rob Bonta
The firm’s assets, including its valuable genetic database, are rumored to be heading to auction shortly. This database is well known for its uniqueness and inability to be fully anonymized, which has led to fears of potential misuse. Even the National Human Genome Research Institute warns about the sensitivity of DNA data. They describe the critical dangers posed by this information getting into the wrong hands.
23andMe has responded by reaffirming their commitment to user privacy.
"Our users' privacy and data are important considerations in any transaction, and we remain committed to our users' privacy and to being transparent with our customers about how their data is managed," – 23andMe
Customers should be free to delete their genetic data at any time. Simply go to 23andMe.com, log in to your account, and select Permanently Delete All Records. This additional process is not required and can take 30 days or more to complete. According to Adrianus Warmenhoven, member of the security advisory board at NordVPN, there has never been a more critical time to safeguard data. His organization works with 23andMe to address security concerns forthrightly.
"Revoke permissions you no longer require, shut down any account you don't use, and learn about how your data is used." – Adrianus Warmenhoven
Warmenhoven describes genetic data as the "blueprint of your entire biological profile," stressing the importance of safeguarding such information. He challenges people to be more conscious of their online activity. Beyond that, he suggests you look into credit monitoring or identity theft protection services.
"Monitor your digital footprint regularly, and you can also sign up for credit monitoring or identity theft protection services." – Adrianus Warmenhoven
As 23andMe enters bankruptcy, the future of its valuable genetic database is unclear. Meaning, how the company chooses to act in the coming months will be under a bright spotlight from stakeholders and customers both.