What happens to your DNA when the company you trusted goes bankrupt?
If you’ve used 23andMe to learn more about your ancestry or health, the company’s recent bankruptcy filing might feel like more than just a business headline – it might feel personal.
Well, it should.
Here’s why: when a company holding your genetic data hits financial trouble, your DNA doesn’t just disappear. It becomes a potential asset, which means something that could be sold, transferred, or handed off to someone you never intended to share it with.
Why You Should Be Concerned
Bankruptcy isn't just a money problem for 23andMe, it’s a data problem for you. The company needed a buyer, and yes, the sale included all the digital assets it holds. That means your personal, irreplaceable genetic profile could be passed to another company – possibly one with less stringent privacy standards or entirely different intentions.
Even if you took the test a year ago and haven’t logged in since, your data is still there unless you’ve taken steps to remove it. And we’re not just talking about a name and email address. We’re talking about a detailed blueprint of your biological identity.
Think about this: Would you be okay with a private company you've never heard of gaining access to your health risks, ancestry, and potential medical markers?
What’s Changed Recently?
As of May 2025, several major developments have unfolded:
- Regeneron Acquisition: Regeneron Pharmaceuticals has agreed to purchase 23andMe for $256 million. The deal is expected to close later this year, excluding the Lemonaid Health telehealth unit, which will be discontinued.
- Privacy Commitments: Regeneron has stated it will honor 23andMe's existing privacy policies, promising to maintain strong privacy, security, and ethical oversight standards.
- 2023 Data Breach Fallout: A major data breach in 2023 affected 6.9 million users. A $30 million class-action settlement is underway, with claims open until July 14, 2025.
- Consumer Action Required: Customers can request account deletion and the destruction of their DNA sample through 23andMe’s official process. Note: some data may still be retained to meet legal obligations.
How to Protect Yourself
The good news? You’re not powerless. While it might take some legwork, you can request to have your data deleted and your test sample destroyed. But you’ll need to act fast and follow specific steps.
Here’s what you can do:
- Log in to your 23andMe account. Head straight to the account settings.
- Request account deletion. This removes your access and begins the process of data removal.
- Follow instructions for sample destruction. This is separate from account deletion. 23andMe is required to provide a way to request the destruction of your physical DNA sample.
Keep in mind, the process isn’t necessarily user-friendly. But persistence matters, especially when it comes to something as intimate and unchangeable as your genetic code.
Note: The Attorney General for California recently released detailed instructions on how to delete, destroy, or revoke permission for use of your DNA data, which you can find here.
A Wake-Up Call for Consumers
This isn’t just a 23andMe problem, it’s a broader issue about how much control consumers really have over their data once it’s out of their hands. The allure of learning more about your heritage or health risks is strong, but many people don’t realize what they’re agreeing to when they spit into that test tube.
Genetic testing companies often reserve the right to use your data for research or partnerships, even with de-identified information. But de-identified doesn’t mean untraceable. And when a company collapses, your consent may not mean much to the buyer taking over.
So, before using any similar service in the future, ask yourself:
- What happens to my data if the company goes under?
- Can I permanently delete my information later on?
- Do I trust this company with something this personal?
Remember, in the digital age, privacy isn’t guaranteed – it’s earned through vigilance.