Protecting Your Genetic Data: What 23andMe's Potential Bankruptcy Means for You

Here at Buffalo Nutrition and Dietetics, PLLC, we understand the growing concerns surrounding genetic data privacy, especially with recent news about 23andMe's financial struggles. For years, we've utilized raw genetic data, often from services like 23andMe, to provide personalized functional medicine nutrition recommendations to our patients. This allows us to tailor dietary and lifestyle plans based on individual genetic predispositions, optimizing health outcomes.

However, the potential bankruptcy of 23andMe raises important questions about the security and future of your genetic information. We believe it's crucial for our patients and the wider community to be informed and proactive in protecting their data.

The Current Situation

As of late March 2025, 23andMe has filed Chapter 11 bankruptcy. This development follows a substantial decrease in the company's valuation and comes in the wake of a 2023 data breach that compromised the genetic data of millions of users. The breach was attributed to lack of widespread implementation of multi-factor authentication (MFA), particularly two-factor authentication (2FA), on 23andMe user accounts by 23andMe users. This made it easier for hackers to gain unauthorized access to accounts on the consumer end, using compromised credentials.

The bankruptcy raises concerns about the future of this sensitive information, particularly regarding potential asset sales and the possibility of data ending up in unintended hands. These issues underscore the ongoing need for robust data security and the required implementation of user privacy protections, in the direct-to-consumer genetic testing industry.

Why Genetic Data Matters

Your genetic data is deeply personal. It can reveal predispositions to certain diseases, responses to medications, and even information about your ancestry. In the hands of the wrong entity, this data could be misused, leading to privacy breaches, discrimination, or other unintended consequences.

Steps to Protect Your Data

Given the uncertainty surrounding 23andMe's future, we recommend taking the following steps to safeguard your genetic information:

1. Understand Your Data:

   • Familiarize yourself with the type of data 23andMe holds about you.

   • Review their privacy policy and terms of service.

2. Consider Deleting Your Data:

• Deleting your data is a proactive step.

• 23andMe provides options for deleting your account and genetic information.

• Follow the directions provided by 23andme to delete your data.

3. Download Your Raw Data:

• If you wish to retain your genetic information, download your raw data file.

• Store it securely on an encrypted external drive or in a secure cloud storage service.

• Be aware that even if you download your raw data, 23andme may still retain some of your data.

4. Review Third-Party Access:

• Check which third-party applications have access to your 23andMe data.

• Revoke access for any applications you no longer use or trust.

5. Stay Informed:

• Keep up-to-date with news and developments related to 23andMe's situation.

• Follow reputable sources for information on genetic data privacy.

We encourage you to take proactive steps to protect your genetic data. If you have any questions or concerns about your data management, please contact 23andme directly for assistance.