23andMe, a prominent company known for its genetic testing and ancestry services, is facing an uncertain future following a significant data breach in late 2023.
The company, which handles the highly sensitive DNA data of millions of users, has left many customers worried about the safety of their personal genetic information. The breach, coupled with the resignation of the company’s entire board, has sparked widespread concerns about data privacy and the company’s future direction.
The breach exposed the personal details of around 6.9 million users, raising alarm about the potential misuse of genetic data. While 23andMe reassured that no DNA records were accessed, hackers reportedly targeted specific demographic groups and offered the information for sale on the dark web. The company is now dealing with a $30 million class action settlement in the wake of this breach.
At the same time, 23andMe’s CEO Anne Wojcicki has hinted at plans to take the company private, leading to further uncertainty. Initially, there were fears of a potential takeover by a third party, which intensified concerns about data privacy. However, Wojcicki clarified that there are no plans to consider third-party proposals and reassured customers that privacy policies will remain intact.
Eva Galperin, the Director of Cybersecurity at the Electronic Frontier Foundation (EFF), has advised 23andMe customers to evaluate their privacy settings and consider deleting their genetic data. This sentiment is echoed by other cybersecurity experts who urge users to review their data-sharing consents and take steps to protect their information.
While some experts emphasize that genetic data at 23andMe is no more vulnerable today than before the breach, they advise customers to be cautious about the long-term implications of sharing such personal information. Genetic data can reveal insights into an individual’s health, making it valuable to companies for targeted advertising or even, in some cases, insurance assessments.
How to Delete Your DNA Data from 23andMe
For those who decide to remove their data from 23andMe’s database, the process is straightforward. Customers can request the deletion of their genetic information via the company’s privacy settings. To do so:
- Log into your 23andMe account.
- Navigate to the Account Settings.
- Submit a request for data deletion.
After submitting the request, the company will send a confirmation email to verify the deletion. However, it’s important to note that while users can stop future sharing, any genetic information already shared with third parties for research purposes cannot be retracted.
CBS News, Financial Times, and CNET contributed to this report.
