As customers blindly submit their DNA samples to a major testing company and expectantly wait for their results, many are unaware that data thieves may be waiting for their results, too. The popular at-home DNA testing service, 23andMe, has experienced a major data leak in recent years, compromising the privacy of millions. Now, changes are being made within the company to protect and further participate in the study of genetics.
23andMe, an at-home DNA kit, has tested the genetic makeup of over 14 million people since 2006 and has become a path for many to know more about their family and cultural background. In late 2023, however, the company suffered a large security breach that compromised the safety and privacy of millions of users.
The hackers were able to access ancestry information, relative matches, profile data, and more. With this, the company could no longer promise confidentiality and privacy, and by 2025, roughly 1.9 million people, approximately 15% of their database, requested that their data be removed from the app. This development occurred in March 2025, following 23andMe’s filing for Chapter 11 bankruptcy and its announcement that it would be selling its company’s data to a nonprofit.
During this process, many found that it was more difficult than they had realized to remove their data, as technical issues raised more questions about the lack of transparency and increased control. Having full authority over one’s own data was a promise the company made throughout this process. Still, despite this, people worried about what the buyers would utilize their information for, and did everything they could to have it removed.
A few years after the incident, 23andMe sold its customer data, stored biological samples, and health and ancestry personal profiles to TTAM (Twenty-three and me) Research Institute for $305 million. Despite objections from privacy experts and citizens, a federal judge approved the sale with the condition that the new buyer maintain the existing privacy policies.
This significant change in management led the new owners at TTAM Research Institute to establish a Privacy Advisory Board on October 20th, 2025. It comprises several healthcare representatives and professors from Harvard Law School and Indiana University.
“The establishment of this board, with its deep and diverse expertise, reflects our dedication to ensuring our policies and practices reflect the highest standards of data protection and ethical use while we continue to pioneer genetic discovery,” said Anne Wojcicki, Founder and CEO of 23andMe Research Institute.
The controversy behind 23andMe comes as our society evolves technologically, scientifically, and medically. Further, this discussion has sparked conversations about the future of at-home DNA kits. While this information can unlock knowledge you didn’t know was out there, it could also be leaked to others who have full access to your records.
While we navigate through this ever-changing world, it is more important now more than ever to assess the safety risks on online platforms and take proactive steps to protect the most personal information, your DNA.
