As 23andMe faces an uncertain future, customers are concerned about protecting their data, with options to request deletion, though uncertainties remain about how long the company retains data post-deletion and potential third-party access
Genetic testing company 23andMe has filed for bankruptcy as it seeks financial stability through a sale to a new owner. Despite the filing, the company has assured customers that its operations will continue without disruption, including the management and protection of customer data. However, this reassurance has done little to ease concerns among users who remember the company’s massive data breach in 2023, which exposed sensitive genetic information.
The bankruptcy filing marks a dramatic downfall for a company once valued at $6 billion in 2021. 23andMe’s business model, built on offering consumers DNA-based insights into their ancestry and potential health risks, has struggled to maintain momentum. Reports suggest that just recenlty, the company’s valuation had plummeted to approximately $50 million. The financial turmoil has forced leadership to seek new ownership, hoping to secure the funds necessary to keep operations running.
As part of this transition, 23andMe’s longtime CEO Anne Wojcicki resigned on the same day the company announced its bankruptcy. In a statement, she revealed that she intends to place a bid to acquire the company as an independent buyer. Her announcement raised questions about whether her leadership could offer a viable path forward, given that a previous attempt to take 23andMe private was rejected last year. The bidding process is expected to attract multiple contenders, but the central concern for many customers is who will ultimately control their highly sensitive genetic data.
23andMe’s security woes continue
A major issue arising from the bankruptcy filing is what will happen to the vast database of personal genetic information collected by 23andMe over the years. According to the company’s own privacy policy, personal data could be transferred to a new owner in the event of a sale, merger, or acquisition. This revelation has sparked concerns among privacy advocates, who fear that a new owner could repurpose the data for commercial gain. If acquired by the wrong hands, this information could potentially be used by insurance companies to adjust coverage plans or by data brokers to fuel even more invasive targeted advertising.
The situation is particularly alarming given 23andMe’s troubled history with data security. In 2023, the company suffered a massive breach affecting up to seven million users, with leaked information surfacing on the dark web. Exposed data included users’ names, account details, genetic markers, and ancestry insights. Following the breach, 23andMe faced criticism not only for failing to prevent the attack but also for blaming customers, arguing that those affected had neglected to update their passwords. This response damaged the company’s reputation and left customers questioning how secure their most personal information really was.
Customers left in data limbo
With the company now facing an uncertain future, customers are left wondering what steps they can take to protect their data. For those looking to sever ties with 23andMe, the company does allow users to request the deletion of their personal data. However, concerns remain over how long the company retains information after a deletion request and whether third parties may already have access to some of the data.
Beyond individual concerns, the bankruptcy filing and the company’s financial struggles reflect broader challenges in the direct-to-consumer genetic testing industry. While services like 23andMe once saw a surge in popularity, consumer interest has waned in recent years. Privacy concerns, skepticism over the accuracy of health-related insights, and a growing reluctance to share genetic data with private companies have all contributed to the decline. Additionally, regulatory scrutiny has increased, with governments worldwide paying closer attention to how genetic data is stored, shared, and used.
For now, 23andMe insists that its day-to-day operations will remain unchanged despite the bankruptcy. The company continues to market its services and process genetic tests as usual, even as leadership navigates the complexities of restructuring and potential sale. But as the company searches for a buyer, the fate of its genetic database remains a pressing issue, leaving millions of customers in limbo as they wait to see who—if anyone—will take control of their most personal information.
Also Read: Cyber Attack On 23andMe impacts Five Million Customers
