Genetic testing giant 23andMe is facing a turbulent future after filing for bankruptcy, leaving millions of customers questioning the security of their most personal data — their DNA.
The company, known for helping users trace their ancestry and genetic traits, has a database of over 15 million users. However, after a recent data breach exposed sensitive user information, concerns over data privacy have only intensified.
With bankruptcy proceedings underway, cybersecurity experts warn that user data could be at risk, depending on how the company restructures — or who acquires it.
Gene Hoyt, a computer information systems instructor at Florida Gulf Coast University, says many users fear what will happen to their genetic data now that the company is in financial turmoil.
“We already suspect that the possibility of our data is out there,” Hoyt said. “So when we heard that the bankruptcy proceedings started, it definitely makes you wonder — is our data already gone?”
While 23andMe allows users to delete their online profiles, Hoyt raises another critical concern: the physical DNA samples.
“Even if you delete all your information, where’s your sample?” he said. “Will 23andMe destroy your sample if you ask for your profile to be deleted? I can’t guarantee that.”
The uncertainty has led many users to take immediate action. Hoyt, along with his family, recently deleted their profiles as a precaution.
“When this company gets sold to whatever entity it goes to, they have the rights to all the content that 23andme has,” he said.
As word spreads about potential risks, an increasing number of users are logging in to delete their data — so many, in fact, that the company’s website reportedly crashed due to high traffic.
“I can't guarantee that you're going to get in there any time soon, or if they're going to keep the system up with the amount of users that are deleting their active data,” Hoyt said.
For those concerned about their privacy, experts recommend downloading your data before deleting your account, request a copy of your genetic reports through the 23andMe website.
The California attorney general has also advised users to take these precautions to minimize risk.
To Delete Genetic Data from 23andMe:
- Consumers can delete their account and personal information by taking the following steps:
- Log into your 23andMe account on their website.
- Go to the “Settings” section of your profile.
- Scroll to a section labeled “23andMe Data” at the bottom of the page.
- Click “View” next to “23andMe Data”
- Download your data: If you want a copy of your genetic data for personal storage, choose the option to download it to your device before proceeding.
- Scroll to the “Delete Data” section.
- Click “Permanently Delete Data.”
- Confirm your request: You’ll receive an email from 23andMe; follow the link in the email to confirm your deletion request.