The alarming headline behind this story was published on October 24, 2024, when 23andMe’s finances made bankruptcy a possibility—not an established fact. The practical issue remains real: a bankruptcy, merger, reorganization, or asset sale can put company-held genetic and account data under new control.
The public materials available for this update do not establish a definitive bankruptcy filing, court-approved buyer, or completed transfer of 23andMe genetic data. Do not treat rumors or the 2024 warning as proof that “your DNA was sold.” Instead, understand what the company’s privacy statement permits, what deletion actually does, and which steps you can take now.
The short answer
- A bankruptcy estate or buyer could receive company-held customer information in an approved transaction.
- 23andMe’s privacy statement contemplates transfers during bankruptcy, mergers, acquisitions, reorganizations, and asset sales.
- The statement says genetic data transfers are subject to conditions, including the buyer’s agreement to adopt the privacy statement and compliance with applicable legal and foreign-investment requirements.
- A transfer is not the same as public disclosure, and account deletion is not guaranteed erasure of every record.
- Download records before deleting an account, then review research, relative-matching, sample-storage, and security settings.
The controlling details would be the bankruptcy court’s orders, transaction documents, regulator notices, and the privacy policy in force at the time. Those records are not established by the sources available here, so claims about a final buyer or exactly which databases changed hands should remain qualified.
What changed after the 2024 warning?
| Date | What is established |
|---|---|
| October 2023 | 23andMe said credential stuffing led to direct access to approximately 14,000 accounts, with information in about 5.5 million DNA Relatives profiles and 1.4 million Family Tree profiles also accessed. Company incident report |
| October 24, 2024 | Futurism described bankruptcy as a looming possibility amid losses, a collapsed valuation, the breach, and board resignations. Original article |
| 2025–2026 | The available material here does not verify a filing date, case number, buyer, sale terms, or post-transaction corporate structure. Those points require primary court, regulatory, or company records. |
| August 18, 2026 | The privacy questions remain answerable from 23andMe’s published statement, but the legal effect of any later transaction depends on documents and orders not identified here. |
“Your DNA” is several different kinds of data
| Category | Examples | Why the distinction matters |
|---|---|---|
| Genotype data | Analyzed A, T, C, and G variants | Highly sensitive digital information that may be transferred or retained under different rules. |
| Reports | Ancestry and health reports derived from genotype data | Deleting a report is not necessarily the same as deleting the underlying genotype. |
| Biological sample | Stored saliva tube | A physical sample can be destroyed separately from digital records. |
| Relative and family data | DNA Relatives matches, shared-DNA percentages, Family Tree details | Your test can reveal information about relatives who never tested. |
| Self-reported data | Surveys, health information, family history | These records are distinct from laboratory genotype results. |
| Account data | Email, payment, contact, device, and registration information | Ordinary personal data may follow a different retention or transfer path. |
| Research data | De-identified or aggregate datasets, analyses, and publications | Withdrawal generally cannot undo completed or published research. |
23andMe’s privacy statement defines these categories separately. Treating all of them as one file called “your DNA” obscures what deletion or a sale can actually affect. Read the privacy statement.
#1 Best Overall
- TOP-SELLING CONSUMER DNA TEST: From your origins in over 3,600+ places around the world to the most connections to living relatives, no other DNA test kit delivers an experience as unique and interactive as AncestryDNA.
- YOUR DATA, YOUR CONTROL: We give you full control over your genetic information. You decide what to share, and with whom.
- DNA + TRAITS: Ever wondered where your freckles came from, or why you hate cilantro? AncestryDNA + Traits lets you discover 75+ genetic traits, allowing you to explore how your genes might have influenced a range of appearance, sensory, performance, nutrient, and other personal characteristics.
- A FEW SIMPLE STEPS: Simply activate your DNA kit online and return your saliva sample in the prepaid package to our state-of-the-art lab. Your results will be available online in roughly six weeks.
- ORIGINS AND INHERITANCE: AncestryDNA is the only DNA test that can show your origins results, DNA matches, and traits by each side of the family, without your parents taking a DNA test.
Could a bankruptcy buyer acquire genetic information?
23andMe’s statement says personal information may be accessed, sold, or transferred in a bankruptcy, merger, acquisition, reorganization, or asset sale. It also says genetic information will not be transferred unless specified conditions are met, including the buyer’s agreement to adopt the statement and compliance with applicable U.S. legal and foreign-investment requirements. That is a contractual and policy promise, not a guarantee that policies can never change.
Four possible transaction paths
- Operating-company sale: A buyer could take over accounts, systems, contracts, and associated privacy obligations.
- Selected-asset sale: A transaction might cover software, laboratories, customer relationships, or particular databases rather than every asset.
- Wind-down: Without a buyer, data could remain under the debtor’s control while being deleted or retained for legal and laboratory obligations.
- Court-supervised transaction: A bankruptcy court, regulators, or state attorneys general could impose notice, use, or deletion conditions.
None of these scenarios by itself proves that customer genomes were publicly released. The legally important questions are what the order defines as transferred, which entity receives it, what notices customers receive, and which privacy promises survive.
Rank #2
- TOP-SELLING CONSUMER DNA TEST: From your origins in over 3,600 places around the world to the most connections to living relatives, no other DNA test kit delivers an experience as unique and interactive as AncestryDNA.
- YOUR DATA, YOUR CONTROL: We give you full control over your genetic information. You decide what to share, and with whom.
- A FEW SIMPLE STEPS: Simply activate your DNA kit online and return your saliva sample in the prepaid package to our state-of-the-art lab. Your results will be available online in roughly six weeks.
- ORIGINS AND INHERITANCE: AncestryDNA provides more precise ancestral origins with greater geographic detail. Our innovative SideView technology takes your results even further by showing your origins and matches by parental side. *Some DNA features require an Ancestry subscription.
- BUILD YOUR FAMILY TREE: Combine what you learn from your DNA results with an Ancestry subscription and gain access to millions of family trees and the world's largest collection of online family history records. *Access to record collections varies depending on subscription level.
Does HIPAA protect 23andMe customers?
Customers should not assume they receive the same HIPAA protection that applies to records held by a hospital or health insurer. HIPAA generally covers specified health-care entities and business associates, not every direct-to-consumer service handling health-related information. University of Iowa law professor Anya Prince made that point in the original coverage. Source.
Lack of automatic HIPAA coverage does not mean “no protection.” State genetic-privacy and consumer-protection laws, contractual privacy promises, Federal Trade Commission enforcement, bankruptcy orders, and other laws may apply. The result can depend on the product, jurisdiction, and relationship involved.
Rank #3
- ABOUT THE TEST: The Genetrace DNA Paternity Test helps families conclusively determine if a man is the true father of a child.
- NO HIDDEN FEES: Kit includes all lab fees and sample return costs to test one (1) child and one (1) potential father.
- FAST RESULTS: Get secure, confidential results within 1-2 business days after testing begins. We'll keep you updated every step of the way.
- EASY SAMPLE COLLECTION: No needles, no blood, no doctors. Collect your samples with our easy-to-use mouth swabs, then return them to the lab with the provided prepaid return envelope. It's quick, easy & painless.
- ACCURATE & RELIABLE: Up to 27 genetic markers analyzed for over 99.999% accuracy. All tests performed TWICE in our AABB, ISO 17025 & CLIA accredited laboratory.
What law enforcement can request
The privacy statement says 23andMe will not voluntarily provide personal information to law enforcement without valid legal process such as a court order, subpoena, or search warrant. It also allows preservation and disclosure when legally required. That distinguishes voluntary sharing from compelled disclosure.
A buyer would inherit a database subject to outstanding legal demands, but bankruptcy does not automatically give police unrestricted access. Requests for account identifiers, raw genotype data, and information obtained from public genealogy databases are different questions.
Rank #4
- MAP YOUR ORIGINS ACROSS 5,000+ REGIONS: Ancestry Composition breaks down your ethnicity across 5,000+ geographic regions worldwide, the most detailed ancestry breakdown of any consumer DNA service. Ancestry Timeline estimates how many generations ago your most recent ancestor from each population lived.
- FIND LIVING RELATIVES: Opt in to DNA Relatives to see up to 1,500 people in the 23andMe database who share DNA with you, from close family to distant cousins, and message them directly. Your Family Tree builds itself automatically based on your DNA.
- DISCOVER WHAT MAKES YOU UNIQUE: See how your DNA may influence physical features, sensory preferences, and habits across 30+ traits, including cilantro taste aversion to hair texture to deep sleep.
- TRACE ANCIENT MIGRATIONS: Maternal and Paternal Haplogroup reports follow your ancestors' migration paths across continents over thousands of years (paternal haplogroup requires a Y chromosome). Find out how much of your ancestry can be traced back to the Neanderthals.
- PRIVATE BY DESIGN: Your DNA data is encrypted, protected, and always under your control. Enhanced security measures are implemented to keep your information safe. Subject to 23andMe’s Terms of Service and Privacy Statement at 23andMe online.
What account deletion really does
Account deletion is available through Account Settings and is irreversible. The policy says deletion automatically opts the customer out of research and discards the stored saliva sample, subject to legal and regulatory requirements. It also says genetic information, date of birth, and sex may be retained when required by obligations such as CLIA, California law, or laboratory-accreditation rules.
Deletion therefore can remove the account from active use and trigger sample destruction, but it is not a promise that every digital or derivative record disappears. Research already performed or published cannot necessarily be undone. Copies downloaded by you, shared with relatives, uploaded to third-party services, or preserved in screenshots are outside 23andMe’s control.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteBest Value
- About HomePaternity: This DNA test will conclusively determine if a man is the biological father of a child using a simple at-home kit including cheek swabs from the father and child.
- Fast Results: Your kit includes Overnight FedEx return to the lab and results will be available within 1-2 days after your sample arrives, in our secure online portal.
- Over 99.999% Confidence: With up to 34 genetic markers examined, we confirm paternity with the highest accuracy, typically 99.999%+. Tests are run twice in our lab, which has obtained over 6 certifications.
- Easy Sample Collection: Collect your samples with mouth swabs, then return in the pre-paid Overnight mailer. Includes testing for 1 child and 1 possible father; can add more participants after kit registration.
- Internal Lab: With over 25 years of experience and over 20 million tests performed, we don’t use third-party labs.
The 2023 breach: what was and was not exposed
23andMe attributed the incident to credential stuffing: attackers used reused passwords from other breaches rather than an identified internal system vulnerability. The company reported direct access to approximately 14,000 accounts—less than 0.1 percent—along with access to information in roughly 5.5 million DNA Relatives profiles and 1.4 million Family Tree profiles. Company incident report.
Those figures do not establish that 6.9 million complete genetic profiles were stolen. The affected information included relationship details, display names, shared-DNA percentages, and Family Tree information. Change reused passwords and enable two-step verification wherever available.
What customers should do now
- Download first: Save raw genetic data, reports, family-tree information, and account records you may need. Deletion can permanently remove access.
- Review research: Opt out of future research and check any separate individual-level data-sharing permissions if you no longer want to participate.
- Review matching: Turn off DNA Relatives or limit profile visibility where the current controls allow it. This will not erase copies already downloaded or recorded elsewhere.
- Choose sample storage: If you do not want the physical sample retained, use the available discard control. The policy says discard choices cannot be reversed.
- Delete if appropriate: Use Account Settings, understanding that deletion is irreversible and some records may remain for legal, laboratory, contractual, audit, or dispute-related reasons.
- Save proof: Keep the confirmation, date, support-ticket number, and later company notices.
- Secure other accounts: Replace any reused 23andMe password and turn on two-step verification elsewhere.
When deletion may or may not be right
Deletion is sensible when
- You no longer use the service.
- You have downloaded records you need.
- You are uncomfortable with future ownership changes.
- You want the stored physical sample discarded.
Keeping the account may make sense when
- You actively use relative matching.
- You want continued access to reports or updates.
- You knowingly accept research participation.
- You want to monitor notices and policy changes from inside the account.
Questions to ask before buying any DNA test
- Can raw data be downloaded, and can the physical sample be destroyed?
- Is research opt-in, and are individual-level sharing permissions separate?
- Is deletion self-service, and what legal or laboratory retention exceptions apply?
- What does the policy say about bankruptcy, mergers, and change of control?
- Does the company require legal process for law-enforcement requests?
- Is two-factor authentication available?
- Can data be uploaded to third-party databases, and what new exposure would that create?
- Are health reports clinical products, regulated medical services, or informational estimates?
AncestryDNA (ancestry.com/dna) and MyHeritage DNA (myheritage.com/dna) emphasize genealogy; GEDmatch (gedmatch.com) accepts uploads from other providers and can create an additional matching and investigative-genealogy relationship. None is categorically privacy-safe. People seeking medical interpretation rather than ancestry matching can consider a genetic counselor through the National Society of Genetic Counselors directory: findageneticcounselor.nsgc.org.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
