23andMe Bankruptcy: Protect Your Data and Stay Safe from the 2023 Breach

TL;DR

23andMe has filed for bankruptcy, raising concerns about customer data privacy. Customers are advised to delete their data and check if they were affected by the 2023 data breach. Steps include requesting data deletion and using security tools to protect personal information.

Main Content

The genetic testing company 23andMe filed for bankruptcy on Sunday, announcing that it will continue operating normally, including how customer data is handled, as it seeks financial stability through a sale.

“The company intends to continue operating its business in the ordinary course throughout the sale process,” 23andMe wrote in a news statement. “There are no changes to the way the company stores, manages, or protects customer data.”

For some customers, this continuity is precisely the problem. In 2023, 23andMe experienced a major data breach and partly blamed victims for recycling and not updating their passwords. With the company’s future ownership uncertain, customers are rightly concerned about the security of their genetic information.

What Is Happening?

Over the weekend, 23andMe announced its bankruptcy after months of financial decline. Once valued at $6 billion in 2021, the company’s genetic testing business has struggled, with its value dropping to $50 million recently. To save the company, 23andMe’s leadership is searching for a new owner. One potential bidder is former CEO Anne Wojcicki, who resigned on the day of the bankruptcy announcement.

“I have resigned as CEO of the company so I can be in the best position to pursue the company as an independent bidder,” Wojcicki wrote on LinkedIn. However, her earlier proposal to take the company private was rejected last year.

Whoever becomes the new owner of 23andMe could also gain control of customer data. According to the company’s privacy statement:

“If we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your Personal Information may be accessed, sold or transferred as part of that transaction.”

Experts worry that a new owner could share customer data with insurance companies or data brokers, leading to increased premiums or invasive advertising.

How to Delete Your 23andMe Data

For 23andMe customers who want to delete their data:

1. Log into your account and navigate to Settings.
2. Under Settings, scroll to the section titled 23andMe data. Select View.
3. Enter your date of birth for extra security.
4. Choose any personal data you’d like to download. Once finished, scroll to the bottom and select Permanently delete data.
5. You will receive an email from 23andMe detailing its account deletion policy and requesting confirmation. Once confirmed, the deletion process will begin automatically, and you will immediately lose access to your account.

How to Find Your 23andMe Data in the 2023 Breach

In 2023, 23andMe suffered a data breach affecting up to seven million people. The leaked data included profile and account ID numbers, names, gender, birth year, genetic markers, ancestral heritage results, and health data opt-in status. This information could be used by cybercriminals for identity fraud.

There is no way to remove this data from the dark web. Instead, use the free Digital Footprint Portal to check if your data was exposed and take additional steps to protect yourself.

If your data was exposed in the 23andMe breach, here is what you can do:

• Change your password: Create a strong password that you don’t use elsewhere. Use a password manager for added security.
• Enable two-factor authentication (2FA): Use a FIDO2-compliant hardware key for enhanced security.
• Watch out for fake vendors: Verify the identity of anyone contacting you about the breach.
• Take your time: Phishing attacks often impersonate known brands and require urgent action.
• Consider not storing your card details: Avoid storing card information on websites.
• Set up identity monitoring: Use identity monitoring to alert you if your personal information is being traded illegally online.

For further insights, check:

• Malwarebytes Blog
• The Record

Conclusion

The bankruptcy of 23andMe and the 2023 data breach have raised significant concerns about the privacy and security of genetic data. Customers are urged to take proactive steps to delete their data and protect their information. As the company seeks a new owner, the future handling of customer data remains uncertain, highlighting the importance of vigilance and proactive security measures.

References