Senator Warns of Potential Chinese Acquisition of 23andMe Genetic Data

TL;DR

• Senator Cassidy warns about the risks of 23andMe’s genetic data being acquired by China following the company’s bankruptcy.
• The article highlights the potential national security threats and provides steps for users to delete their data and check if it was part of a 2023 breach.

Senator Cassidy Raises Alarm Over 23andMe Genetic Data Acquisition

Senator Bill Cassidy, chair of the US Senate Health, Education, Labor, and Pensions Committee, has voiced significant concerns regarding the potential acquisition of 23andMe’s genetic data by foreign adversaries, including the Chinese Communist Party. This alarm comes amidst 23andMe’s bankruptcy filing and subsequent search for a new owner, with the company viewing its genetic database as a valuable asset in the sale.

Potential National Security Risks

In a letter to Treasury Secretary Scott Bessent, Senator Cassidy emphasized the national security implications of such an acquisition. He highlighted that Chinese companies have already taken steps to collect genetic data globally, which could be used for adverse purposes. The Department of the Treasury, through the Committee on Foreign Investment in the United States (CFIUS), has the authority to review transactions that may impact U.S. national security ¹.

23andMe’s Assurances and Senator Cassidy’s Concerns

23andMe has attempted to reassure its customers by stating that any buyer would be required to comply with its privacy policy and all applicable laws regarding customer data. However, Senator Cassidy remains concerned that the company and its assets could be sold to the highest bidder, potentially putting the data of approximately 15 million customers at risk. He has asked 23andMe to provide details about the sales process, data transfer supervision, customers’ ability to delete their data, and the impact of bankruptcy on the company’s cybersecurity infrastructure ².

How to Delete Your 23andMe Data

For 23andMe customers who wish to delete their data, the following steps can be taken:

1. Log into your account and navigate to Settings.
2. Under Settings, scroll to the section titled 23andMe data and select View.
3. Enter your date of birth for extra security.
4. Choose any personal data you wish to download from the company onto a personal computer.
5. Scroll to the bottom and select Permanently delete data.
6. Confirm your request via email from 23andMe to initiate the deletion process.

Check if Your 23andMe Data Was Part of the 2023 Breach

In 2023, 23andMe experienced a data breach affecting up to seven million people. The breached data, found on the dark web, included profile and account ID numbers, names, gender, birth year, genetic markers, ancestral heritage results, and health data opt-ins. This information could be used by cybercriminals for identity fraud and other malicious activities ³.

To check if your data was exposed in the 2023 breach, use the free Digital Footprint Portal and take additional steps to protect yourself.

Additional Resources

For further insights, check:

• 23andMe Bankruptcy: How to Delete Your Data and Stay Safe
• Letter to Treasury Secretary Bessent on 23andMe CFIUS Review
• Letter to 23andMe on Data Sale
• Scraping Incident at Genetic Testing Site
• Malwarebytes Digital Footprint Portal
• Malwarebytes Identity Theft Protection

Conclusion

The potential acquisition of 23andMe’s genetic data by Chinese entities raises serious national security and privacy concerns. Users are advised to take proactive steps to delete their data and check for any breaches to protect their personal information.

References

1. Senator Bill Cassidy (2025). “Letter to Treasury Secretary Bessent on 23andMe CFIUS Review”. DocumentCloud. Retrieved 2025-04-10. ↩︎

2. Senator Bill Cassidy (2025). “Letter to 23andMe on Data Sale”. DocumentCloud. Retrieved 2025-04-10. ↩︎

3. The Record (2023). “Scraping Incident at Genetic Testing Site”. The Record. Retrieved 2025-04-10. ↩︎