Have you ever spit into a 23andMe tube to discover your ancestry or learn about your health risks? Well, if you’re one of the 15 million users, it’s time to pay close attention. On March 23, 2025, 23andMe filed for Chapter 11 bankruptcy, seeking to sell its assets—including the highly sensitive genetic data of millions. This news may feel like a punch in the gut, but it’s essential to understand the consequences of this financial collapse and what you can do to protect your personal data before it lands in the hands of unknown buyers.

The Fall of a $6 Billion Giant

Once a billion-dollar company, 23andMe’s downward spiral has been swift and dramatic. In 2023, the company suffered a massive data breach that exposed nearly 7 million profiles, revealing not just ancestry but private health information as well. As if that wasn’t damaging enough, declining kit sales, a costly $30 million breach settlement, and a 40% staff reduction have left the company scrambling to recover. With liabilities ranging between $100 million and $500 million, it’s no surprise 23andMe is now filing for bankruptcy.

Their plan? To sell off the company’s assets in a court-supervised process, aiming to “maximize stakeholder value.” Unfortunately for consumers, that means your genetic data is now a commodity—one that’s likely to be sold to the highest bidder. Whether that buyer is a pharmaceutical giant or a data broker remains uncertain, but what is clear is that your sensitive genetic information is up for grabs.

A Risk for All of Us

The implications of this bankruptcy and the subsequent sale of user data go far beyond the individual. Privacy concerns are rampant, especially when considering how genetic information could be used in identity theft, blackmail, or other malicious activities. If your family member has submitted their DNA to 23andMe, your genetic data may also be exposed, as familial ties make your information partially vulnerable. Additionally, with shaky federal privacy laws and weak state-level protections, there’s little to prevent a new owner from tweaking the privacy policy, potentially allowing the sharing of genetic data with insurers or even law enforcement without a warrant.

For organizations, this event serves as a cautionary tale. Law firms, universities, and corporations alike should be vigilant about the risks a breach poses—whether it involves client confidentiality, student records, or trade secrets. In a world where data security can make or break an entity, the catastrophic aftermath of a breach is not confined to just tech companies. A breach in any industry can have devastating financial and reputational consequences.

Is Your Organization Ready for a Breach?

Let’s face it: we’ve seen this story unfold too many times. Data is only “safe” until it’s not. The average cost of a breach for a company today stands at around $4.5 million (according to IBM’s 2023 report). Can your organization absorb that financial hit? Do you have cyber insurance to cover the cost, and would it even be enough? It’s crucial to take preventative steps now to mitigate these risks and avoid finding yourself in a similar situation.

What You Can Do: A Simple 3-Step Guide

To protect your personal genetic data and prevent it from falling into the wrong hands, here are three essential steps you can take immediately:

1. Download Your Data
   Log into your 23andMe account, go to Settings > 23andMe Data > View, and download your genetic file. It’s critical to do this before the company’s assets are sold off. Additionally, navigate to the Health & Traits section and save or print the reports that matter to you in PDF format.

2. Delete Everything
   Once you have your data, it’s time to say goodbye. In your Settings, you’ll find the option to “Delete Data.” Confirm your deletion via email, and make sure to wipe your entire account. While it might feel like an irreversible decision, this step will help protect you from further exposure.

3. Spread the Word
   This isn’t just about protecting yourself. Encourage your friends, family, and employees to take the same steps to secure their data. As this situation develops, the more people who act quickly, the better. Genetic data is a powerful asset, and we must all take responsibility for protecting it.

Conclusion: Don’t Wait, Act Now

The filing for bankruptcy and the potential sale of 23andMe’s assets should serve as a wake-up call for all of us. Genetic data is not just personal; it’s potentially life-altering and can have long-term ramifications if misused. With the future uncertain and privacy laws lagging behind, taking steps to secure and delete your genetic data is the best defense against the growing risks of data breaches. Download, delete, and spread the word—before your data is sold to the highest bidder. Protect yourself now, because the consequences of waiting could be far-reaching.