Cybersecurity experts warn of data privacy risks after 23andMe files for bankruptcy
CANNOT ASSUME YOUR DATA IS SAFE. WITH 23 AND ME. YOU CAN’T CHANGE YOUR PASSWORD TO YOUR DNA ONCE YOU’VE GOT THAT INFORMATION, IT DOESN’T CHANGE. GENETIC TESTING COMPANY 23 ANDME IS FILING FOR BANKRUPTCY AND LOOKING FOR A NEW OWNER, WHICH MEANS THE DATA OF MILLIONS OF CUSTOMERS WHO USED THE AT-HOME DNA TESTING KITS TO HELP REVEAL THEIR FAMILY HISTORY AND GENETICS. THAT INCLUDES THEIR GENETIC PROFILE, THEIR HEALTH INFORMATION, PERSONAL IDENTIFIERS, NAME, DATES OF BIRTH IS UP FOR SALE. IT’S A HORRIBLE SITUATION. CYBERSECURITY EXPERT GARY MILEVSKY SAYS CUSTOMERS WHO WANT TO REDUCE THEIR RISK OF THEIR PRIVATE INFORMATION BEING SHARED SHOULD DO A FEW THINGS. NOW. I WOULD REQUEST DATA DELETION. I’D STAY INFORMED AND LOOK AT THEIR OFFICIAL COMMUNICATIONS, INCLUDING EMAILS AND STATEMENTS REGARDING THEIR BANKRUPTCY AND THE NEW HAMPSHIRE ATTORNEY GENERAL’S OFFICE ADDS. YOU CAN REQUEST TEST SAMPLES BE DESTROYED AND REVOKE AUTHORIZATION FOR 23 AND ME TO SHARE IT WITH ANY THIRD PARTY RESEARCHER. THEY’VE TURNED HUMAN GENETIC MATERIAL AND PERSONALLY IDENTIFIABLE INFORMATION, MILLIONS OF RECORDS, INTO AN ASSET THAT WILL BE PART OF AN ASSET SALE. THE COMPANY SAYS IT WILL CONTINUE OPERATIONS AS NORMAL THROUGHOUT THE SALE PROCESS, WITH NO CHANGES TO THE WAY IT STORES AND MANAGES OR PROTECTS CUSTOMER DATA. BUT A COMPANY WIDE BREACH IN 2023 IS STILL BEING INVESTIGATED, WITH THE AG’S OFFICE SAYING, QUOTE, THIS NEGLIGENCE NOT ONLY DAMAGED THE COMPANY’S REPUTATION, BUT ALSO VIOLATED THE TRUST OF THOSE WHO ENTRUSTED THEIR PERSONAL DATA TO THE COMPANY. SO GARY SAYS, WHATEVER COMES OUT OF THIS, I WOULD AVOID THE COMPANY THAT BUYS THEM. SO ANYONE IN NEW HAMPSHIRE WHO NEEDS HELP TO REMOVE THEIR DATA FROM 23 AND ME CAN ACTUALLY CONTACT THE STATE’S DEPARTMENT OF JUSTICE BY EMAIL OR BY CALLING THAT NUMBER RIGHT THERE ON YOUR SCREEN.
Cybersecurity experts warn of data privacy risks after 23andMe files for bankruptcy
Updated: 12:05 AM EDT Mar 27, 2025
The New Hampshire attorney general’s office is reminding people of their rights after genetic testing company 23andMe announced it is filing for bankruptcy.The company is looking for a new owner, meaning the data of millions of customers who used its at-home DNA testing kits could be up for sale.”You can’t change your password to your DNA. Once you’ve got that information, it doesn’t change,” said cybersecurity expert Gary Miliefsky.Under state law, New Hampshire residents have the right to access, obtain, correct and delete personal data collected about them.Miliefsky said customers concerned about their private information being shared should do a few things. “I’d request data deletion, I’d stay informed and look at their official communications, including emails and statements regarding bankruptcy,” he said.>> Download the free WMUR app to get updates on the go: Apple | Google Play <<The attorney general’s office also reminded people they can request that test samples be destroyed and revoke authorization for 23andMe to share data with third parties.”They’ve turned human genetic material and personally identifiable information, millions of records, into an asset that will be part of an asset sale,” said Miliefsky.The company said it would continue operations as normal throughout the sale process, with no changes to how it stores, manages or protects customer data. However, a company-wide data breach in 2023 is still under investigation.”This negligence not only damaged the company’s reputation but also violated the trust of those who entrusted their personal data to the company,” said the attorney general’s office. Anyone who needs help to remove their data from 23andMe can contact the state’s department of justice by email or by calling 1-888-468-4454.
MANCHESTER, N.H. —The New Hampshire attorney general’s office is reminding people of their rights after genetic testing company 23andMe announced it is filing for bankruptcy.
The company is looking for a new owner, meaning the data of millions of customers who used its at-home DNA testing kits could be up for sale.
“You can’t change your password to your DNA. Once you’ve got that information, it doesn’t change,” said cybersecurity expert Gary Miliefsky.
Under state law, New Hampshire residents have the right to access, obtain, correct and delete personal data collected about them.
Miliefsky said customers concerned about their private information being shared should do a few things.
“I’d request data deletion, I’d stay informed and look at their official communications, including emails and statements regarding bankruptcy,” he said.
>> Download the free WMUR app to get updates on the go: Apple | Google Play <<
The attorney general’s office also reminded people they can request that test samples be destroyed and revoke authorization for 23andMe to share data with third parties.
“They’ve turned human genetic material and personally identifiable information, millions of records, into an asset that will be part of an asset sale,” said Miliefsky.
The company said it would continue operations as normal throughout the sale process, with no changes to how it stores, manages or protects customer data. However, a company-wide data breach in 2023 is still under investigation.
“This negligence not only damaged the company’s reputation but also violated the trust of those who entrusted their personal data to the company,” said the attorney general’s office.
Anyone who needs help to remove their data from 23andMe can contact the state’s department of justice by email or by calling 1-888-468-4454.
