New York AG's Urgent Call: Delete Your 23andMe Account Now!
Bankruptcy Sparks Privacy Fears Over Genetic Data Security
Why New York AG Is Sounding the Alarm on 23andMe Bankruptcy Concerns
The New York Attorney General Leticia James has issued a pressing plea to 23andMe users, urging them to delete their accounts and secure their genetic data following the company's recent bankruptcy filing. This alarming directive comes in response to 23andMe's financial collapse, announced amid declining demand for its once popular ancestry testing kits. The company, a household name in DNA testing, filed for Chapter 11 bankruptcy protection, sparking widespread anxiety about the future of users' sensitive genetic information. With the potential sale of assets on the horizon, questions loom large: What happens to the DNA data of millions of customers? Could it fall into the wrong hands? James' call to action reflects a growing unease about data privacy in the wake of this corporate upheaval, and it's a warning that consumers cannot afford to ignore. Alongside her advisory, California Attorney General Rob Bonta has echoed similar concerns, amplifying the urgency for users to take immediate steps to protect their personal information.
The stakes couldn't be higher. Genetic data is among the most personal and irreplaceable information a person can share, offering insights into ancestry, health risks, and even familial connections. Unlike a password or credit card number, DNA cannot be changed if compromised. With 23andMe's bankruptcy raising the specter of asset sales, including its vast database of user information, the New York AG's office is stepping in to empower customers with actionable steps to safeguard their privacy. James has not only urged account deletions but also provided detailed instructions for users to erase their data and destroy stored saliva samples, offering a lifeline to New York residents who encounter obstacles in the process by inviting them to contact her office for assistance.
Understanding the 23andMe Bankruptcy Filing and Its Implications
To grasp the gravity of this situation, it's essential to delve into the details of 23andMe's bankruptcy filing and what it means for data security. The company officially sought Chapter 11 protection in the U.S. Bankruptcy Court for the Eastern District of Missouri, a move designed to restructure its finances and facilitate a sale of its assets under court supervision. This filing followed years of financial strain, compounded by a massive data breach in 2023 that exposed the information of 6.9 million users and led to a $30 million settlement in 2024. Shares plummeted, dropping 1.7% to 64 cents shortly after the announcement, a stark decline from their peak as the company struggled with waning interest in its core product: at home DNA testing kits.
Under Chapter 11, 23andMe aims to continue operations while soliciting bids for its assets over a 45 day period, potentially culminating in an auction. The company has assured customers that this process won't alter how it stores, manages, or protects their data, asserting that any buyer must comply with applicable privacy laws. Yet, this promise offers little comfort to experts and regulators who point to the inherent risks of bankruptcy proceedings. During such sales, user data is often treated as a valuable asset, and 23andMe's privacy policy explicitly allows for the transfer of personal information in the event of bankruptcy, mergers, or acquisitions. This means a new owner could inherit millions of genetic profiles, potentially using them in ways users never intended, from marketing to research or worse, depending on the buyer's priorities and adherence to data protection standards.
How to Delete Your 23andMe Account and Protect Your Genetic Data
For those heeding the New York AG's advice, the process to delete a 23andMe account and secure genetic data is straightforward but comes with critical nuances. Users can initiate account deletion through the Account Settings on the 23andMe website, triggering an automated process that requires email confirmation. Once confirmed, the deletion is immediate and irreversible, cutting off access to the account and its associated reports. Additionally, customers who opted to store their saliva samples or DNA with 23andMe can request their destruction, another irreversible step that ensures physical samples aren't retained. To withdraw consent for the use of genetic data in research, users can adjust their preferences in the account settings, halting future use even if prior consent was given.
However, deleting an account doesn't erase all traces of data. 23andMe and its third party genotyping labs may retain certain information, such as genetic data, date of birth, sex, and details tied to the deletion request (like email addresses), to comply with legal obligations. Data previously shared for research purposes also remains in ongoing or completed studies, though it won't be used moving forward if consent is revoked. This partial retention underscores the importance of acting swiftly, before a potential sale transfers data to new hands. For New York residents facing technical difficulties or needing clarification, the AG's office stands ready to assist, ensuring no one is left navigating this process alone. Users can also reach out to 23andMe's privacy team at privacy@23andMe.com for further support.
Aspect | Details |
---|---|
Ability to Delete Account | Yes, through Account Settings, requires confirmation via email, irreversible. |
Ability to Delete Saliva Sample | Yes, can request destruction, irreversible choice. |
Data Retention Post Deletion | Some genetic info, date of birth, sex, and deletion request data retained for legal obligations. |
Research Data | Cannot remove from ongoing/completed studies, but not used in future research if opted out. |
Contact for Assistance | Email privacy@23andMe.com for questions; New York residents can contact AG's office. |
The Broader Context of Genetic Data Privacy in Corporate Failures
The 23andMe bankruptcy isn't an isolated incident but a glaring spotlight on the vulnerabilities of genetic data privacy when companies falter. The biotech industry, particularly firms dealing in DNA testing, holds troves of sensitive information that become precarious during financial distress. Cybersecurity experts have long warned of the risks, especially given 23andMe's history of breaches, like the 2023 incident that saw hackers exploit credential stuffing to access millions of profiles. The $30 million settlement that followed barely scratched the surface of the trust eroded among users, and now, bankruptcy adds another layer of uncertainty.
Across the Atlantic, the UK's Information Commissioner's Office has signaled it's monitoring the situation, emphasizing compliance with GDPR standards for any data handling post sale. This international scrutiny reflects a global recognition of genetic data's value and vulnerability. For users, the lesson is clear: sharing DNA with commercial entities carries long term risks, particularly when those entities face instability. The New York AG's urgent call to delete 23andMe accounts is a proactive step, but it also highlights a reactive gap in consumer protections, where individuals must scramble to secure data after the fact rather than rely on robust safeguards upfront.
Why Acting Now Matters for 23andMe Users Worldwide
For 23andMe customers, the clock is ticking. The bankruptcy process moves quickly, and with bids due within weeks, the fate of user data hangs in the balance. Deleting accounts and samples now offers the best chance to limit exposure, even if some data lingers due to legal retention policies. New York residents benefit from the AG's hands on support, but the advice resonates globally: act before a sale reshapes the landscape of who controls your genetic blueprint. California's parallel warning reinforces this, suggesting a coordinated push among regulators to prioritize consumer safety amid corporate collapse.
This moment also prompts a broader reflection on trusting companies with irreplaceable personal information. As 23andMe navigates its financial reckoning, users are left to navigate the fallout, armed with deletion tools and regulatory guidance. The New York AG's directive isn't just a reaction to bankruptcy; it's a rallying cry for data sovereignty in an era where genetic privacy is increasingly at risk. Whether you're a long time 23andMe user or simply watching from the sidelines, the message is unmistakable: protect your DNA data before it's too late.
Key Citations- 23andMe Initiates Voluntary Chapter 11 Process
- New York AG Urges 23andMe Users to Delete Accounts
- Requesting 23andMe Account Closure Customer Care
- 23andMe Privacy Policy Page
- Questions Related to 23andMe's Chapter 11 Filing Customer Care
- How to Delete Your 23andMe Data MIT Technology Review
- Protect Your Genetic Data Urgent Steps After 23andMe Bankruptcy
- 23andMe Bankruptcy Data Security Concerns Mercury News
- How to Delete Your Data From 23andMe WIRED
Comments
Post a Comment