Consider deleting 23andMe data, PA AG tells consumers

Pennsylvania Attorney General Dave Sunday is advising consumers who used 23andMe’s DNA testing kits to consider deleting their personal and genetic information as the company navigates Chapter 11 bankruptcy.

23andMe, which filed for bankruptcy earlier this year and is seeking a buyer, has stated it intends to continue protecting customer data.

Despite the company’s claim, Sunday cautioned that the bankruptcy process could lead to the sale of this sensitive information.

“My office is not directing all 23andMe consumers to delete their accounts, but we encourage those consumers to consider such action as there are some uncertainties as to what will happen to the very sensitive data and information obtained by the company,” Sunday said. “Pennsylvanians should be aware of a potential sale of their information as part of the bankruptcy process.”

The state’s top law enforcement official noted that consumers whose personal or genetic information was exposed in a 2023 data breach may be eligible to file a proof of claim in the bankruptcy case, with a deadline of July 14.

The attorney general’s office took action to ensure a consumer protection ombudsman is in place during the bankruptcy proceedings to review security policies and monitor how a potential sale could affect customer data.

23andMe filed for Chapter 11 bankruptcy in the U.S. Bankruptcy Court for the Eastern District of Missouri on March 23. Under Chapter 11, a company’s assets, which could include consumer data, may be sold to a buyer.

According to the 23andMe bankruptcy administration website, customers can still delete their data and accounts.

The company outlines the following steps to delete genetic data:

1. Log into your 23andMe account.
2. Go to the “Settings” section of your profile.
3. Scroll down to a section labeled “23andMe Data” at the bottom of the page.
4. Click “View” next to “23andMe Data.”
5. Download your data if you’d want to retain a copy of your genetic data for personal storage.
6. Scroll down to the “Delete Data” section.
7. Click “Permanently Delete Data.”
8. Confirm your request by following the instructions emailed to you by 23andMe. You must confirm the request to have your data removed.

Users can also request the destruction of their saliva sample and DNA under the “Preferences” section of their account settings and revoke consent for their data to be used for research under “Research and Product Consents.”

More information on account deletion can be found at https://customercare.23andme.com/hc/en-us/articles/212170688-Requesting-23andMe-Account-Closure.

Information on filing a proof of claim and the bankruptcy proceedings is available at https://restructuring.ra.kroll.com/23andMe/Home-Index.

Pennsylvania consumers impacted by the 23andMe bankruptcy can file a complaint with the Pennsylvania Attorney General Office’s Bureau of Consumer Protection online or by calling 1-800-441-2555.