23andMe is bankrupt. Your DNA might be next.
As 23andMe prepares to sell off its assets to pay down debts, there’s growing concern that one of those assets is you — or at least, the most intimate version of you: your genetic code.
Unlike a password or a credit card number, your DNA can’t be changed. It carries your ancestry, your health predispositions, your familial links — and in the wrong hands, it can be weaponized in ways most people have never considered. From blackmail and discrimination to biometric spoofing and synthetic identity crimes, leaked genetic data presents long-term risks that go far beyond basic privacy violations.
If you’ve ever used a consumer DNA testing service — or if a family member has — now is the time to act.
This guide will show you, step-by-step, how to lock down your genetic data, reduce future exposure, and take back control.
🧬 Why You Need to Secure Your DNA
Most people think of DNA testing as a personal curiosity: a fun way to learn about your heritage, health, or potential genetic traits. But your raw genome is biological data with incredible commercial and political value — and when it’s handled by corporations, it’s rarely protected the way it should be.
Here’s why your genetic data is high-value and high-risk:
- It’s uniquely identifiable — even partial DNA data can be used to re-identify you or your relatives.
- It contains predictive medical information that could be used by insurers or employers to discriminate.
- It links you to familial networks — putting your siblings, parents, and children at risk too.
- Once leaked, it could be used in synthetic identity crimes, false evidence planting, or even bioweapon targeting.
And yet, companies like 23andMe have collected this data at scale, sold access to pharmaceutical companies, and left it vulnerable to breaches — all while profiting off your biology.
🚨 What’s Happening with 23andMe?
In 2023, 23andMe suffered a major breach that leaked millions of user profiles. Then in 2024, the company was delisted from the stock market after financial struggles. In early 2025, 23andMe filed for bankruptcy — and according to industry analysts, they’re now expected to sell off assets to repay debts.
This includes patents, research partnerships, and yes — potentially, the genetic data they’ve accumulated over a decade.
If you’ve used their service, your genome may now be on the table.
🛡️ How to Lock Down Your Genetic Data
Here’s a step-by-step guide to minimizing your risk — whether or not you used 23andMe.
1. Delete Your DNA from 23andMe (and Similar Platforms)
Your first move is to delete any genetic data you’ve given to companies like 23andMe, AncestryDNA, or MyHeritage.
To delete your 23andMe data:
- Log in to your account.
- Go to Settings.
- Scroll to Delete Your Data.
- Select the option to delete both your account and your genetic results and saliva sample.
- Confirm your deletion.
📌 Note: Deleting your account does not automatically delete data already shared with third parties. That’s where the next step comes in.
2. Send a GDPR Data Request (Even if You’re Not in the EU)
Under the General Data Protection Regulation (GDPR), you have the right to request:
- A copy of all data a company holds on you.
- A list of third parties it was shared with.
- Complete deletion of your data from their systems and backups.
Even if you’re outside the EU, many companies (especially in the U.S.) will honor GDPR-style requests under privacy pressure or due to overlapping state laws like the California Consumer Privacy Act (CCPA).
📧 Use this template to send your request to 23andMe (privacy@23andme.com):
Subject: GDPR Data Access & Erasure Request
Hello,
Under Articles 15 and 17 of the GDPR, I am requesting:
– A copy of all personal and genetic data you hold on me.
– A list of all third parties this data has been shared with.
– Complete erasure of my personal and genetic data from your systems, backups, and partner organizations.
Please confirm compliance within 30 days.
Thank you,
[Your Full Name]
[Email associated with your 23andMe account]
3. Remove or Limit Family Member Data (If You Can)
Genetic data is shared across families. Even if you never tested, a parent, cousin, or sibling could expose your genetic fingerprint.
Encourage relatives to:
- Delete their raw data from DNA testing platforms.
- Opt out of public family tree or relative-matching features.
- Turn off DNA sharing in their account settings.
It’s not just about your own privacy — it’s collective protection.
4. Opt Out of Data Sharing in Your Account Settings
If you’re not ready to delete your account, at least lock down the settings.
For 23andMe:
- Go to Settings → Privacy/Sharing
- Turn off:
- Research participation
- Health data sharing
- DNA relative matching
This will limit what happens to your data in the meantime.
5. Avoid Third-Party DNA Upload Sites (Like GEDmatch)
Platforms like GEDmatch and FamilyTreeDNA let users upload raw DNA files for extended matching. These sites are searchable by law enforcement and third parties — and have been involved in multiple legal controversies.
If you’ve uploaded your DNA to any third-party site:
- Log in
- Delete your raw file
- Delete your account if possible
These are low-security, high-risk platforms.
6. Scrub Genetic Inferences from Data Brokers
Many data brokers (like Spokeo, BeenVerified, or PeopleDataLabs) scrape and infer medical or genetic details from public and purchased records.
Use tools like:
These services help you opt out of hundreds of data broker sites that may be buying or deducing genetic risk profiles about you.
7. Avoid Future DNA Tests That Don’t Offer Full Control
Going forward, only use DNA testing services that:
- Do not store data in the cloud
- Allow you to delete or download your raw file locally
- Offer end-to-end encryption
- Disclose exactly who has access to your data
No company should be allowed to permanently own your biological blueprint.
🧠 Final Thoughts
Your DNA isn’t just a fun fact about you — it’s your identity, your future, and your family’s legacy.
In an age of mass surveillance, data monetization, and geopolitical instability, your genetic code has become a weaponizable asset.
And if 23andMe’s collapse tells us anything, it’s this:
Never give your genome to a company that treats it like property.
Because once it’s sold, you don’t get it back.
📥 Want to Dive Deeper?
Join the NeuroSpicy Cyber Club and access a 48-page technical deep dive into cyberbiosecurity — covering DNA breaches, bio-identity theft, and real-world exploitation risks.
→ Subscribe for $10/month
