23andMe — Case Brief

AI-generated. This brief was written by AI as a plain-language factual summary for class use. Verify against primary sources before relying on it.

---

23andMe is a consumer genetics company. You mail in a tube of saliva; the company reads your DNA and sends back reports on your ancestry and health risks. About 15 million people have done this. To provide it, 23andMe keeps your genetic data — the most intimate data there is — on its servers.

In 2025 the company ran out of money and filed for bankruptcy. In a bankruptcy, a company’s assets are sold to pay its debts — and 23andMe’s most valuable asset is its database of roughly 15 million people’s DNA. A court process put that data on the block, to be transferred to whoever bought it, for purposes those 15 million never agreed to.

Your DNA is not only yours. It reveals information about your biological relatives — parents, siblings, children, cousins — none of whom sent in a tube or signed anything. And unlike a password, you cannot change your genome; once it is exposed, it stays exposed, for you and for everyone you are related to.

Customers were told they could delete their data, and after the bankruptcy news state officials urged people to do exactly that — but it is contested how completely deletion works and what happens to copies already made. In a twist, the company’s co-founder moved to buy the data back through a nonprofit and ultimately won control of it — so the “a company sold your DNA to strangers” story is messier than it first looks.