A new wave of concern has swept across the U.S. as millions of users of the DNA testing company 23andMe are now being advised to delete their stored genetic data immediately. This warning follows not only the company’s recent filing for bankruptcy protection but also a chilling reminder of just how vulnerable personal data — especially DNA — can be in the wrong hands.
23andMe, once one of the most recognized names in consumer genetic testing, built a reputation by helping individuals trace their ancestry, discover distant relatives, and learn more about their genetic predispositions. Over 15 million customers worldwide sent in their saliva samples, many unknowingly handing over some of the most intimate information possible — their biological blueprint.
Now, as the company faces financial instability, and its CEO and co-founder Anne Wojcicki has stepped down, the situation has taken a darker turn. With bankruptcy proceedings underway and the company’s future uncertain, questions about how securely that sensitive data is stored — and what might happen to it during a sale or transfer — have grown louder.
In response to these developments, California Attorney General Rob Bonta has stepped forward with a strong warning for consumers: exercise your legal right to delete your genetic data from 23andMe. In his official statement, Bonta emphasized that California’s privacy laws empower individuals to not only demand the removal of their personal digital data but also request the destruction of any physical biological samples — including saliva.
He didn’t mince words, urging people to act quickly. “Given 23andMe’s reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company,” Bonta said in a public release.
This isn’t the first privacy issue the company has faced. Just last year, in 2023, 23andMe was hit by a massive data breach that affected approximately seven million users. Hackers exploited recycled, weak passwords, gaining access to extensive user details. Though the company insists that DNA data itself wasn’t accessed, the event still set off alarms about just how easily cybercriminals could target such a sensitive database.
And now, with the company’s value and structure in flux, the risks have intensified. As 23andMe moves into a court-supervised sale process, there’s mounting anxiety over what a potential buyer might do with all that genetic information. While the company has stated that data privacy will remain a key consideration during any transition, users are being told not to rely solely on corporate promises — but to take action themselves.
Mark Jensen, chairman of 23andMe, issued a public statement saying the company remains committed to customer privacy and transparency during this turbulent time. However, critics and legal experts argue that once a company is in financial distress and enters sale negotiations, control over user data can become blurry. What begins as secure storage might quickly become a negotiation asset.
If you’re one of the millions who once sent in a saliva sample to 23andMe, deleting your data is still possible — and recommended. The California Department of Justice has issued step-by-step guidance to help users reclaim control of their personal information.
To begin the deletion process, you must first log into your account on the company’s website. From there, go to your Settings, and scroll to the section marked “23andMe Data.” Before deleting anything, users can choose to download a personal copy of their genetic data to keep for their own records. Once ready, scroll down to “Delete Data” and confirm the deletion. You’ll also receive a confirmation email, and only by clicking the link in that email will the deletion be finalized.
But digital deletion isn’t all that matters. If you previously agreed to have your physical saliva sample stored, Bonta’s office reminds you that this too can be revoked. Simply go into your Preferences section under Settings, where you can change your storage selection and request that your biological sample be destroyed.
While 23andMe was once viewed as a futuristic step forward in personal health and family discovery, recent events have highlighted how risky it can be to hand over one’s genetic code to a private corporation. The fallout from the data breach and bankruptcy proceedings paints a sobering picture — one where personal DNA, if not properly handled, could become a liability.
Millions of users once trusted the brand with the deepest parts of themselves — now, they’re being told to pull the plug, delete their data, and walk away while they still can. This is no longer about curiosity or family history; it’s about privacy, safety, and the power to control your own identity in an age where data is currency.
