23andMe Users Rush to Delete DNA Data Breach Fallout and Bankruptcy Rumors

23andMe Users Rush to Delete DNA Data Breach Fallout and Bankruptcy Rumors

23andMe, the DNA-testing giant once praised for unlocking ancestry secrets, is now under fire after a massive data breach in late 2024 exposed the genetic and personal details of nearly 7 million users. The company is also facing whispers of an impending bankruptcy filing. As trust crumbles, many users are scrambling to erase their DNA from the company’s servers before things spiral further.

The breach happened last October through a credential-stuffing attack, where hackers used stolen passwords from other websites to access 23andMe accounts. They didn’t just steal names or emails—they grabbed raw genetic data on 6.9 million users, including sensitive health insights and family relationships, which was then sold on the dark web. The fallout has been severe: class-action lawsuits are stacking up, and a $30 million settlement is reportedly on the table, according to Reuters. The company’s stock has plummeted—falling from a $6 billion valuation in 2021 to literal pennies.

Concerns over user privacy are growing louder, especially as posts on social media warn that “23andMe’s circling the drain. Delete your data now before it’s too late.”

Rumors that the company might file for Chapter 11 bankruptcy have hit harder this week. A Wall Street Journal report from March 24, 2025, suggests that 23andMe is exploring restructuring options as cash reserves dry up and legal expenses mount. CEO Anne Wojcicki hasn’t confirmed anything publicly, but the situation feels grim—especially after the company laid off 40% of its staff in 2024. For users, the fear is clear: if 23andMe collapses, what happens to their genetic data?

Some privacy experts aren’t mincing words. One lawyer told Forbes that “if they fold, your DNA’s an asset up for grabs.” social media echoed the fear, warning that “your genes could end up with anyone—insurers, pharma, whoever.”

How to Delete Your 23andMe Data, Step by Step

If you’re ready to delete your data, you’re not alone. It won’t erase absolutely everything, but it’s the most direct way to pull your DNA from the company’s hands. Here’s how to do it, based on 23andMe’s own process:

First, log in to your 23andMe account at 23andme.com. Use your email and password, or reset your credentials if needed. Once inside, click your name or profile icon at the top right and choose “Settings” from the dropdown menu.

Scroll down to the section labeled “23andMe Data” and click “View.” If you want a copy of your genetic or ancestry data first, you can hit “Download Data” and follow the instructions to get an email with your files. Otherwise, continue to the delete option.

Look for “Delete Data” and click the red “Permanently Delete Data” button. You’ll be asked to enter your birth date for verification. Type it in and click “Confirm.”

Shortly after, you’ll receive an email from 23andMe with a final confirmation link. You must click that link to complete the deletion. If you don’t, your data stays put.

Once confirmed, your account is deactivated instantly, and most of your data is scheduled for deletion from active systems within 30 days.

What Gets Deleted—And What Doesn’t

Most of your personal and genetic data is erased. This includes your name, address, payment history, reports like ancestry percentages (goodbye 38% Scandinavian), and even your spit sample, if you asked them to store it. If you opted into research participation, no new studies will use your data after deletion.

However, it’s not a perfect wipe. Due to CLIA regulations and California law, 23andMe’s third-party lab retains your raw DNA, birth year, and sex in an anonymized format for up to two to three years. They also keep your email address and a deletion ID for internal records. Any prior research you participated in remains archived, though de-identified.

Why Users Are Leaving

The data breach alone was enough to worry people, but the bankruptcy talk has become the final straw. Many fear that in the event of liquidation, user data could be sold or transferred. While 23andMe claims that its lab data is secure and not for sale, trust is clearly eroding.

A privacy lawyer emphasized that once a company enters bankruptcy, all its assets—including data—can potentially be included in negotiations. As one user said, “Imagine your genome sold to the highest bidder—insurers, pharma, whoever.”

Deleting your account is permanent. Once you confirm, you lose access to all reports, ancestry results, health traits, and DNA matches. Rejoining means starting from scratch with a new kit. Some users have run into hiccups—emails not arriving or birth dates not matching the system—but 23andMe’s customer service (customercare@23andme.com) has been responsive, sometimes requiring an ID scan to resolve issues.

As the company faces mounting legal battles, loss of user trust, and swirling bankruptcy rumors, users are racing against the clock.