23andMe
23andMe is a direct-to-consumer genetic testing service that provides ancestry and health insights from saliva-based DNA analysis, including DNA relative matching and health predisposition reports. After the company's 2025 bankruptcy, its assets were bought by the nonprofit 23andMe Research Institute (formerly TTAM Research Institute), founded by co-founder Anne Wojcicki.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated. Last assessed 2026-09-26. Score revised 2026-09-26: 62 → 40.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
Anne Wojcicki, Linda Avey and Paul Cusenza founded 23andMe, which launched a $999 saliva kit in November 2007 with backing from Google and Sergey Brin. Early friction came from regulators, as California ordered DTC gene-testing firms to stop selling without a physician order in 2008, and from a 2010-2012 subscription model that customers disliked and the company dropped. Its first patent, drawn from customers' Parkinson's data, surprised users in 2012.
The FDA's November 2013 warning letter forced 23andMe to stop giving new customers health reports, leaving a $99 ancestry service. The company had marketed reports on 254 diseases without authorization. In 2014 a federal judge sent customers' class actions over the health marketing to arbitration under its terms of service.
A $60 million Genentech deal for Parkinson's data and a Pfizer collaboration turned 23andMe's consented customer database into a commercial research asset; ethicists described it as a two-sided market in which customers pay for tests and supply the data. Health reports returned in steps through FDA authorizations in 2015 and 2017, and the company built an in-house drug discovery unit.
GSK invested $300 million for four years of exclusive drug-target discovery on aggregate data from a customer base of over 5 million, more than 80% of whom had consented to research. Weeks later 23andMe shut its developer API on two weeks' notice. Kit sales slumped, leading to 2020 layoffs, and the company launched its first recurring membership, 23andMe+ Premium, in October 2020.
23andMe listed on Nasdaq through Richard Branson's SPAC and soon reached a market value of about $6 billion, with Wojcicki holding roughly 49% of the vote through Class B shares. It bought Lemonaid Health for $400 million, took a $50 million payment for a fifth GSK exclusive year, added bankruptcy-sale language to its privacy statement in 2022, and more than doubled the membership price to $69 in 2023 before its first layoffs of the listed era.
23andMe disclosed that a credential-stuffing attack had exposed data on 6.9 million users, then tightened its arbitration terms, blamed victims for reused passwords and disabled features including the chromosome browser. It launched the $1,188-a-year Total Health tier, cut staff repeatedly, and saw its stock fall below $1. All seven independent directors resigned in September 2024, and 40% of the workforce and the therapeutics unit were cut that November.
After its special committee rejected Wojcicki's 41-cent bid, 23andMe filed for Chapter 11 and put its customers' genetic data up for sale; Wojcicki resigned as CEO. A deletion rush crashed its portal, 1.9 million customers asked for deletion, 28 attorneys general sued to require consent, and the UK ICO fined it. Regeneron won the first auction before Wojcicki's nonprofit TTAM outbid it at $305 million, and the court approved the sale over states' objections.
TTAM Research Institute, later renamed 23andMe Research Institute, took over the service under sale conditions that preserve deletion rights, bar transfers without its privacy commitments and add a Privacy Advisory Board. The for-profit shell was liquidated and settled breach claims, while California sued it over alleged breach cover-ups. The nonprofit has added features and research output, and it is pushing health reports and advanced tools into auto-renewing memberships.
Alternatives
Free, nonprofit genealogy platform operated by The Church of Jesus Christ of Latter-day Saints with no DNA testing. Covers the family-tree and historical-records side of genealogy at no cost, with an enormous digitized record collection. Easy to use — just create a free account. Not a substitute for the DNA ancestry or health features, but a strong option for family history research.
Combines DNA testing with a family tree and historical-records platform, and sells optional health reports as a kit upgrade. Its matching database is smaller than Ancestry's. The catch: MyHeritage stopped accepting raw DNA uploads from other services in 2025, so 23andMe customers must buy a new kit and retest, and its discounted kits (about $89) come bundled with a Complete subscription trial that auto-renews at $149 for the first year unless cancelled. Owned by private equity firm Francisco Partners since 2021.
The largest consumer DNA network (over 30 million people, per Ancestry), which makes it more powerful for finding relatives than 23andMe. No health reports, just ancestry and genealogy, and most family-tree record access needs a paid membership. Moderate switch: you must order a new kit (list price $99, often discounted) because AncestryDNA does not accept raw DNA uploads from other services. Owned by private equity firm Blackstone since 2020.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (65 events)
23andMe Launches $999 Consumer DNA Test Kit
23andMe began offering direct-to-consumer genetic testing, charging $999 per saliva kit for ancestry and health risk information. Time magazine later named the genome test kit 'Invention of the Year' in 2008. The launch established the DTC genomics market alongside competitor deCODEme.
California Orders 23andMe and Other Gene Testers to Stop Selling Direct to Consumers
California's Department of Public Health sent cease-and-desist letters to 13 genetic testing companies, most notably 23andMe, requiring them to show state and federal laboratory certification and that tests were ordered by a physician, as state law required. New York had cracked down on the same companies earlier in 2008.
Google and Sergey Brin Invest Millions in 23andMe
Google invested $2.6 million and co-founder Sergey Brin loaned $10 million to 23andMe, his then-wife Anne Wojcicki's company. The close personal and financial ties between 23andMe's CEO and Google's co-founder raised early governance questions about conflicts of interest in how the company would handle genetic data.
23andMe Drops Its Subscription Model After Customer Pushback
23andMe ended the subscription model it had introduced in late 2010, which required a 12-month commitment, and returned to a flat $299 price after complaints from customers and genetic genealogists. Genealogists had worried that lapsed subscribers would lose Relative Finder matches. Customers still inside their first year had to finish paying out their commitment.
First Patent, Drawn From Customers' Parkinson's Data, Surprises Users
23andMe received US Patent 8,187,811, 'Polymorphisms associated with Parkinson's disease', based on research using data its customers had shared. The announcement caught many customers by surprise and prompted concern about the company commercializing genetic information people had contributed for free, in tension with its mission of giving people access to their own genomes.
23andMe Drops Kit Price to $99 Permanently
After raising $50 million in Series D funding, 23andMe permanently reduced its kit price from $299 to $99, making consumer genomics accessible to a mass market. The price cut was explicitly designed to scale the customer database, which would become the company's most valuable asset for pharma partnerships.
FDA Orders 23andMe to Halt Health-Related Reports
The FDA issued a warning letter to 23andMe ordering it to immediately discontinue marketing its Personal Genome Service for health purposes, citing failure to obtain required regulatory authorization for a medical device. The company was marketing health reports on 254 diseases and conditions without FDA clearance. 23andMe suspended health-related genetic reports on December 5, 2013.
Class Action Dismissed, Users Forced Into Arbitration
A federal judge (Lucy Koh, N.D. Cal.) granted 23andMe's omnibus motion to compel arbitration in a set of consolidated and related putative class actions accusing the company of misleadingly marketing its Personal Genome Service, dismissing the claims without prejudice. Because the plaintiffs had created online accounts and accepted the Terms of Service to receive their results, the court held they were bound by its arbitration clause, finding it procedurally but not substantively unconscionable; the Ninth Circuit affirmed in 2016. The ruling showed how the company's contract terms limited customers' legal recourse once they had submitted their DNA and created accounts.
23andMe Sells Parkinson's DNA Data to Genentech for $60M
23andMe signed a $60 million deal with Genentech to share genomic and phenotypic data from 12,000 Parkinson's disease research volunteers, including $10 million upfront and up to $50 million in milestones. The deal marked the company's definitive pivot from consumer product to pharma data broker, commercializing the genetic data of research participants who had submitted their DNA for altruistic research purposes.
Pfizer Partnership for Genetic Research Access
23andMe announced an agreement giving Pfizer access to its Research Platform and Research Portal analysis of its genotyped population of over 800,000 individuals who had consented to research. The deal followed an existing collaboration to enroll 10,000 inflammatory bowel disease patients in a genetic research study and, with the Genentech deal the same month, established the template for 23andMe's data licensing business.
FDA Approves First Direct-to-Consumer Genetic Test
23andMe received the first-ever FDA authorization for a direct-to-consumer genetic test, specifically a carrier status test for Bloom syndrome. This partial restoration of health reporting came 15 months after the FDA shutdown, but covered only carrier status rather than the 254 health conditions previously marketed.
Richard Scheller Hired to Build Internal Therapeutics Division
23andMe hired former Genentech R&D chief Richard Scheller as Chief Science Officer and Head of Therapeutics to build an internal drug discovery division. Scheller began assembling a team of researchers to mine the company's genetic database for therapeutic targets, marking 23andMe's strategic expansion from data licensing into proprietary drug development. The hire represented a significant governance shift, embedding pharmaceutical-industry leadership into a consumer genomics company and expanding the organization's scope well beyond its original consumer-facing mission.
Ethicists Describe 23andMe's 'Two-Sided' Data-Banking Market
A Debate article in BMC Medical Ethics argued that 23andMe had built a 'two-sided market': consumers pay for genetic testing while also supplying genetic, self-reported and web-behavior data that is shared with or sold to third-party partners for research and commercial use. The authors noted that the FDA's November 2013 halt on health reports did not stop the company from continuing health research with consented customers' data, and that more than 1 million people had been genotyped, about 90% of them participating in research.
FDA Authorizes 10 Genetic Health Risk Reports
The FDA granted 23andMe authorization to market health risk reports for 10 diseases including late-onset Alzheimer's, Parkinson's, and celiac disease. This marked the first time the FDA authorized direct-to-consumer genetic health risk reports, restoring a core product feature lost since the 2013 shutdown, though with far fewer conditions covered.
FTC Appears to Be Investigating DTC Genetic Testing Firms Over Data Privacy
Fast Company reported that the Federal Trade Commission appeared to be investigating direct-to-consumer genetic testing companies including 23andMe and Ancestry over their policies for handling personal and genetic data and sharing it with third parties. The probe surfaced when the FTC denied a Fast Company FOIA request on the grounds that disclosure could interfere with law enforcement proceedings; the agency declined to confirm any investigation.
GSK Signs $300 Million Exclusive Data Partnership
GlaxoSmithKline invested $300 million in 23andMe and signed a four-year exclusive collaboration for drug target discovery. 23andMe had over 5 million customers, more than 80% of whom had consented to research, and GSK would draw on their aggregate, de-identified genetic and phenotypic data.
23andMe Shuts Down API, Cutting Off Third-Party Developers
23andMe disabled its API, cutting off dozens of third-party health apps, weight loss services, and quantified-self tools that had used the platform's genetic data since 2012. Developers were given only two weeks' notice. Going forward, the company restricted access to raw genetic data to qualified research collaborators only, while third-party apps could only use data based on 23andMe's own reports. The shutdown, announced weeks after the $300 million GSK deal, concentrated control over users' genetic data and eliminated the ecosystem of independent tools that had given users alternative ways to analyze their own DNA.
23andMe Database Tops 9 Million as Duopoly's Network Effects Harden
MIT Technology Review estimated that more than 26 million consumers had taken at-home DNA tests by early 2019, with 23andMe having tested more than 9 million people, second only to Ancestry. The publication described the two companies as genetic-data 'superpowers' snuffing out competitors through a network effect: the larger a database, the more useful it is for finding relatives, building ancestry estimates and, in 23andMe's case, drug research.
California Consumer Privacy Act Takes Effect, Exposing Genetic Data Gaps
The California Consumer Privacy Act (CCPA) took effect on January 1, 2020, giving California residents rights to know what personal information companies collect, to delete it, and to opt out of its sale. 23andMe states that it does not sell genetic information, but acknowledges that its use of cookies and other tracking technologies for cross-context behavioral advertising may constitute a 'sale' or 'sharing' of personal information under the CCPA, letting advertising providers collect identifiers, activity, device and geolocation data from its sites and apps.
23andMe Lays Off About 14% of Staff as DNA Kit Sales Slump
23andMe laid off 100 employees, about 14% of its workforce, as sales of consumer DNA tests slumped across the industry, MIT Technology Review reported, citing CNBC.
Blackstone Agrees to Buy Ancestry for $4.7 Billion, Reinforcing Market Duopoly
Private equity firm Blackstone agreed to buy a majority stake in Ancestry for $4.7 billion, bringing the largest consumer DNA database (over 18 million people) under private equity ownership. The deal reinforced the duopoly between Ancestry and 23andMe in the DTC genetic testing market, as the two companies together held the vast majority of consumer genetic data, and raised concerns about heightened monetization pressure on Ancestry's data.
23andMe+ Premium Subscription Launched
23andMe introduced 23andMe+ Premium, a $29/year membership offering existing U.S. health customers 10+ exclusive reports and features, such as pharmacogenetics and heart-health reports, plus new reports as they are released. It marked a shift toward recurring subscription revenue, placing new health and ancestry features behind an annual paywall on top of the reports included with the kit.
SPAC Merger Announced with Dual-Class Share Structure
23andMe announced its merger with VG Acquisition Corp., Richard Branson's SPAC, at a $3.5 billion enterprise value. The deal structure included a dual-class share arrangement giving CEO Anne Wojcicki 49% voting control through Class B shares, effectively insulating management from shareholder accountability. Both Wojcicki and Branson invested $25 million each into the $250 million PIPE offering. The SPAC structure allowed 23andMe to access public markets without the disclosure scrutiny of a traditional IPO, and the dual-class shares would later prevent shareholders from overriding Wojcicki's strategic decisions as the company's value collapsed.
23andMe Goes Public via SPAC at $6B Valuation
23andMe completed its merger with VG Acquisition Corp., Richard Branson's SPAC, raising about $592 million in gross proceeds, and began trading on Nasdaq under the ticker 'ME' on June 17, 2021. The deal valued the company at $3.5 billion, and its market capitalization soon rose to about $6 billion. The SPAC route let 23andMe go public without a traditional IPO, and a dual-class share structure left Wojcicki with roughly 49% of the voting power.
California Genetic Information Privacy Act Signed Into Law
Governor Newsom signed the Genetic Information Privacy Act (GIPA, SB 41), effective January 1, 2022, imposing new requirements on DTC genetic testing companies operating in California. GIPA required express consent for the collection, use and disclosure of genetic data, separate consent for storing biological samples and transferring data to third parties, honoring consent revocations within 30 days, and reasonable security practices, with civil penalties of up to $10,000 per willful violation. It joined a growing wave of state laws aimed at the DTC genetic testing industry.
23andMe Acquires Lemonaid Health for $400M
23andMe completed its $400 million acquisition of telehealth and prescription delivery service Lemonaid Health, with 75% paid in stock. The acquisition attempted to vertically integrate healthcare delivery with genetic data, but represented a significant capital deployment for a company that had never achieved profitability. Lemonaid was later sold for just $10 million during bankruptcy.
GSK Pays $50 Million to Extend Exclusive Access for a Fifth Year
GSK exercised its option to extend the exclusive drug-target discovery period of its 23andMe collaboration by a year, to July 2023, paying 23andMe a one-time $50 million. 23andMe also took a royalty option on the joint CD96 immuno-oncology antibody program.
23andMe Begins Integrating Lemonaid Telehealth into Genetic Service
23andMe began integrating Lemonaid Health's telehealth services with its genetics platform, letting customers book $65 consultations with Lemonaid clinicians about genetic health risk reports, starting with hereditary breast and ovarian cancer and familial hypercholesterolemia, and letting 23andMe+ subscribers discuss pharmacogenetic reports. CEO Anne Wojcicki said Lemonaid would underpin a planned 'genomic health service', drawing customers further into a combined 23andMe ecosystem.
23andMe Rewrites Privacy Statement in Plainer Language
23andMe simplified the language of its Privacy Statement, Terms of Service and related legal documents with the stated goal of making them easier to understand, adding explainers on terms such as individual-level, de-identified and aggregate data. The company said the rewrite did not change the substance of its privacy practices.
Subscription Price Doubled from $29 to $69 Per Year
23andMe raised the annual 23andMe+ Premium subscription price from $29 to $69, a 138% increase. CEO Anne Wojcicki said the increase accounted for 'the additional benefits we provide members.' The price hike came as the paid membership base had grown to more than 640,000 members, while the company continued to report heavy losses.
First Round of Layoffs Cuts 9% of Workforce
23andMe said it would cut 75 jobs, about 9% of its workforce, to reduce operating costs after posting a $311.7 million net loss in fiscal 2023. It was the first of several rounds of cuts as the company's financial crisis deepened.
Massive Data Breach Exposes 6.9 Million Users
23andMe confirmed that hackers had accessed genetic and personal data of approximately 6.9 million users through a credential stuffing attack that exploited reused passwords. The attack began in April 2023, but 23andMe did not launch a full investigation until October when stolen data appeared on Reddit. The breach exposed DNA Relatives profiles, health data, ethnicity estimates, and family connections. Unlike passwords, exposed genetic data cannot be changed.
GSK Collaboration Ends, Replaced by $20M Non-Exclusive Data License
After their five-year drug discovery collaboration (four years plus a one-year extension) expired in July 2023, 23andMe and GSK signed a new one-year, non-exclusive data licensing agreement under which 23andMe received a $20 million upfront payment for access to de-identified summary data. 23andMe said the collaboration had produced approximately 50 programs; GSK would own any new programs it started under the license. The shift from a $300 million exclusive partnership to a $20 million non-exclusive license showed the declining value of 23andMe's pharma data business.
Total Health Membership Launched at $1,188/Year
23andMe launched Total Health, a $1,188/year premium membership offering clinical-grade exome sequencing, biannual blood testing, and access to genetics-trained clinicians. The price was roughly 17 times the $69/year 23andMe+ Premium tier and a dramatic escalation from the $99 kit model, putting advanced health features behind a subscription few customers could justify.
Terms of Service Tightened to Hinder Mass Arbitration Post-Breach
Days before disclosing that hackers had accessed data on nearly 7 million customers, 23andMe updated its terms of service, which already required arbitration and barred class actions, adding individualized dispute-resolution requirements that lawyers said were designed to block mass arbitration. Customers were given 30 days to reject the new terms. Lawyers interviewed by TechCrunch called the changes 'cynical' and 'self-serving', aimed at limiting the company's legal exposure after the breach.
23andMe Blames 'Negligent' Breach Victims for Reusing Passwords
In a letter to lawyers representing breach victims, 23andMe argued that users had 'negligently recycled' passwords exposed in other breaches and that the incident was not a breach of its own systems. Critics noted that only about 14,000 accounts were accessed directly; the attacker reached millions of other customers' data through 23andMe's DNA Relatives feature.
Stock Sinks Below $1 as Nasdaq Delisting Threat Looms
CNN reported that 23andMe's shares were trading around $0.70, down 96% from a peak share price of $17.65 in February 2021, and that Nasdaq had notified the company in November 2023 that it was out of compliance with the $1 minimum price rule. Once valued at about $6 billion, the company had yet to turn a profit and could run out of money as early as 2025.
FTC Complaints Expose Aggressive Auto-Renewal Practices
A Freedom of Information Act request by Gizmodo produced 133 FTC complaints about 23andMe filed since January 2023, many from users charged for auto-renewed memberships they said they had canceled beforehand; one complainant said the company had re-subscribed a profile they had canceled. The company refused refunds for partially used membership periods, and some users reported renewal prices significantly higher than they originally paid, including one who had signed up at $29 a year and was renewed at $69 and another who said a single reminder email was the only notice of the price increase.
Wojcicki Files Proposal to Take 23andMe Private at $0.40/Share
CEO Anne Wojcicki filed a proposal to acquire all outstanding shares at 40 cents per share, a fraction of the SPAC listing price. The board rejected the bid as inadequate and lacking detailed financing. The take-private attempt signaled Wojcicki's intent to regain full control of the company and its genetic database at a steep discount to public shareholders.
$30 Million Data Breach Settlement Proposed
23andMe agreed to a $30 million settlement to resolve over 40 class action lawsuits stemming from the October 2023 data breach. The settlement included payments to affected individuals, three years of identity theft monitoring, and additional compensation for residents of states with genetic privacy laws. The $30 million was reportedly the maximum 23andMe could afford, with $25 million covered by cyber insurance.
Entire Independent Board Resigns En Masse
All seven independent directors, including YouTube CEO Neal Mohan and Sequoia Capital's Roelof Botha, resigned simultaneously, publicly rebuking Wojcicki's failure to present a fully financed, actionable take-private proposal after five months. The mass resignation left Wojcicki as the sole remaining board member with unchecked control. The shares closed at 34 cents that day.
EFF Warns Users About Data Sale Risks
The Electronic Frontier Foundation published guidance warning 23andMe users about the privacy risks of a potential data sale following the board collapse, urging customers to delete their data and opt out of research. EFF called for consent processes free of dark patterns, noting that users who opted into research could not reclaim data already shared with pharmaceutical partners.
1-for-20 Reverse Stock Split to Avoid Delisting
23andMe completed a 1-for-20 reverse stock split to regain compliance with Nasdaq's $1 minimum share price requirement. The split reduced outstanding Class A shares from 350 million to approximately 17.5 million but did nothing to address the underlying value destruction. The maneuver was a cosmetic fix for a stock that had lost over 95% of its value.
Ancestry Warns Any 23andMe Acquisition Would Raise Antitrust Concerns
Ancestry's chief legal officer said any acquisition of 23andMe would be 'challenging' from an FTC standpoint because the companies were No. 1 and No. 2 in consumer DNA testing, with databases of roughly 25 million and 15 million customers. The comment came weeks after 23andMe's board resigned en masse, while Wojcicki said she was no longer open to third-party takeover proposals. It highlighted the structural competition problem in DTC genetic testing: the two dominant players controlled most consumer genetic data, and consolidation would create an effective monopoly, limiting realistic acquisition options during 23andMe's crisis.
40% Workforce Cut and Therapeutics Division Shutdown
23andMe announced it would lay off more than 200 employees, about 40% of its workforce, and discontinue its therapeutics business, winding down its clinical trials. The restructuring ended the company's decade-long bet on becoming a drug developer and was expected to save $35 million annually.
Special Committee Rejects Wojcicki's 41-Cent Take-Private Bid
23andMe's special committee unanimously rejected CEO Anne Wojcicki's proposal to buy the shares she did not own for 41 cents each, an 84% cut from a $2.53 offer she had made with New Mountain Capital weeks earlier before that partner withdrew. The stock fell 33% that day and was down more than 99% from its 2021 peak.
23andMe Files Chapter 11 Bankruptcy
23andMe filed for Chapter 11 bankruptcy protection in Missouri federal court after years of mounting losses, with CEO Anne Wojcicki resigning. The company reported $191.8 million in revenue in 2024, a 28% decline year over year, and had never achieved profitability. The filing put roughly 15 million customers' genetic data up for sale as a corporate asset.
Deletion Portal Collapses Under User Rush
Following the bankruptcy announcement, 23andMe's website traffic surged 526% as users rushed to delete their genetic data. The login portal became sluggish and eventually went offline, with users reporting missing verification codes, hours-long waits, and unresponsive systems. Approximately 1.9 million users ultimately deleted their data, but the portal failures functioned as de facto obstruction of deletion rights at the most critical moment.
FTC Chairman Demands Privacy Protections for Purchaser
FTC Chairman Andrew Ferguson issued a public letter demanding that any purchaser of 23andMe's assets be bound by the company's existing privacy policies and applicable law. Ferguson noted that 23andMe holds 'sensitive, immutable, identifiable personal information' including genetic data, biological DNA samples, health records, and ancestry details for millions of Americans.
Nasdaq Suspends and Delists 23andMe Stock
Nasdaq suspended trading in 23andMe's Class A common stock on March 31, 2025, after the bankruptcy filing, and formally announced its delisting on July 2, 2025. The delisting capped a decline from a peak share price of approximately $17.65 in 2021 to effective worthlessness, destroying billions in shareholder value in about four years.
Regeneron Wins First Bankruptcy Auction for 23andMe at $256 Million
Drugmaker Regeneron agreed to buy 23andMe's businesses, including its genetic data on 15 million customers, for $256 million through the bankruptcy auction, pledging to comply with 23andMe's privacy policies. Lawmakers had warned that customers' genetic data could be sold to unscrupulous buyers. The auction was later reopened.
28 Attorneys General Sue to Block Data Sale
A bipartisan coalition of 28 attorneys general (27 states and the District of Columbia), including New York's Letitia James, filed a complaint and a separate objection in bankruptcy court to block the sale of 23andMe customers' genetic data without their express consent. The coalition argued that genetic information, biological samples and medical records are too sensitive to transfer through a bankruptcy auction. The bankruptcy court nonetheless approved the sale to TTAM Research Institute in late June 2025.
Congress Grills 23andMe Leaders on Genetic Data Sale
At a House Oversight Committee hearing on the bankruptcy sale, interim CEO Joe Selsavage said 1.9 million of 23andMe's 15 million customers had asked for their data to be deleted since the filing. He would not commit to letting customers give opt-in consent before their data was sold, despite repeated pressure from lawmakers.
Privacy Ombudsman Says Customers Should Consent to Any Data Sale
The court-appointed consumer privacy ombudsman, Neil Richards, told the bankruptcy court that customers should give separate, affirmative consent before their genetic data was sold. He found that millions of customers had not logged in since 23andMe's June 2022 privacy statement update first mentioned a sale of data in bankruptcy, and that customers described difficulties deleting their own and deceased relatives' accounts.
UK ICO Fines 23andMe for Data Breach Security Failures
The UK Information Commissioner's Office fined 23andMe 2.31 million GBP following a joint investigation with Canada's Privacy Commissioner. The ICO found that 23andMe failed to implement adequate security measures, including not mandating multi-factor authentication for sensitive genetic data, weak password protocols, and inadequate controls on access to raw genetic data, and that it responded slowly to warning signs of the attack. The investigation found 155,592 UK users were affected.
Court Approves TTAM Sale With Added Privacy Conditions
The bankruptcy court approved the $305 million sale to TTAM Research Institute, denying objections, after TTAM agreed to conditions negotiated with states: customers keep the right to delete their data, the data cannot be resold unless the buyer adopts TTAM's privacy commitments, sharing with foreign adversaries is barred, a consumer privacy advisory board must be created, and state attorneys general can demand reports.
Wojcicki's TTAM Nonprofit Completes $305M Acquisition
TTAM Research Institute, a nonprofit public benefit corporation created by former CEO Anne Wojcicki, completed the acquisition of substantially all 23andMe assets for $305 million, outbidding Regeneron's $256 million offer. The sale transferred 15 million customers' genetic data to an entity controlled by the founder who had presided over the company's collapse from a $6 billion valuation. The court approved the sale despite objections from 28 state attorneys general.
Lemonaid Health Sold for $10 Million
Bambu Ventures and Innova Capital Partners agreed to buy Lemonaid Health, the telehealth company 23andMe had acquired for $400 million in 2021, for $10 million in cash. TTAM had earlier offered $2.5 million for it, subject to higher bids.
Nonprofit Appoints Privacy Advisory Board
The 23andMe Research Institute named a Privacy Advisory Board of HCA Healthcare's chief privacy officer Peggy Bodin, Indiana University law professor Fred Cate and Harvard Law professor Jonathan Zittrain, to advise on protecting member information and on the privacy implications of new services, as required by the sale conditions.
Chapter 11 Plan Confirmed; Shares Cancelled and Breach Claims Settled
The bankruptcy court confirmed the liquidating plan of Chrome Holding Co., the former 23andMe, overruling all objections. The plan set a $30-50 million fund for the U.S. breach class, $3.25 million for a Canadian class and $9 million for arbitration claimants, and cancelled the company's stock.
Chromosome Browser Returns, but Only for Paying Members
23andMe quietly rolled out a DNA Relatives clustering tool and restored the chromosome browser it had disabled after the 2023 breach, both for premium subscribers only. Before the breach, the chromosome browser had been available to all customers.
California Sues Former 23andMe, Alleging a Secret Ransom Payment
California Attorney General Rob Bonta sued Chrome Holding Co., formerly 23andMe, over the 2023 breach that exposed data on 855,541 Californians. The complaint alleges the company ignored warnings, downplayed the breach and blamed customers while paying the attacker a ransom to remove damaging posts and disclose vulnerabilities, violating the state's Genetic Information Privacy Act and Consumer Privacy Act.
Court Approves $46.75 Million Payout to Breach Victims
A bankruptcy judge approved a $46.75 million settlement for victims of the 2023 breach, reduced by $14.29 million already paid, leaving $32.46 million in additional payouts. The plan administrator had agreed to the figure in June, below the up-to-$50 million deal approved in January 2026.
42 Attorneys General Settle Breach Claims for $18 Million
A coalition of 42 attorneys general settled claims against the 23andMe bankruptcy estate over the 2023 breach for $18 million, finding it had used unreasonable security practices. The states said the company first denied the breach, then blamed customers, and noted that the TTAM sale terms require stronger security and continued deletion rights.
Health Reports Moved Into Auto-Renewing Memberships
23andMe's updated Membership Terms, dated July 28, 2026, reorganized its offerings into three auto-renewing memberships: Premium Ancestry, Premium Ancestry + Health and Premium Ancestry + Total Health. Its store now sells Premium Ancestry + Health at $199 for the first year and $99 a year after, up from the $69 renewal of 23andMe+ Premium, and its support pages say the one-time Health Service is sold only through Amazon or FSA/HSA stores.
Evidence (52 citations)
D1: User Value Erosion
D2: Business Customer Exploitation
D3: Shareholder Extraction
D4: Lock-in & Switching Costs
D5: Twiddling & Algorithmic Opacity
D6: Dark Patterns
D7: Advertising & Monetization Pressure
D8: Competitive Conduct
D9: Labor & Governance
D10: Regulatory & Legal Posture
Scoring Log (10 entries)
Checked 89 items + prose. 44 verified, 36 corrected (11 date-only), 6 re-sourced, 3 removed (1 duplicate NY AG suit, 1 junk Trustpilot page, 1 fabricated getlatka evidence citing '$879M revenue/$15B valuation' via a Discord page). Invented: getlatka figures; 'privacy researchers noted' claim in the 2022 privacy-rewrite event. Fixed layoff history (14% was 2020), voting control (~49%), GSK consent figures, 23andMe+ launch date and subscriber decline, ToS arbitration framing, 28-AG coalition, settlement amount, Lemonaid disposition, D8 API claim.
62->40. D1 8->5 (event: nonprofit takeover stabilized the service, features restored though paywalled; recalibration: product works, 'shadow of former self' band not met). D2 7->3 (event: sale conditions bar data resale and keep deletion/opt-out; recalibration: no current business-side squeeze). D3 8->2 (event: nonprofit owner with no shareholders; recalibration: for-profit era was value destruction with no buybacks/dividends, not extraction). D4 7->4 (recalibration + event: raw data export and deletion rights preserved under state oversight; lock-in is DNA Relatives network). D6 6->4 (recalibration: deletion obstruction was bankruptcy-era; online cancel now, auto-renew and arbitration remain). D7 4->5 (event: 2026-07-28 membership restructure, health reports only in auto-renewing tiers, renewal $69->$99). D8 4->3 (recalibration: no anticompetitive conduct beyond 2018 API closure). D9 8->5 (event: nonprofit added directors, privacy board; recalibration). D10 6->5 (recalibration: nonprofit accepted privacy conditions; legacy CA AG suit and settlements recorded). D5 unchanged at 4. Eras: current era re-dated 2026-02-11->2025-03-23 (Chapter 11) and relabeled 'Bankruptcy Data Auction'; split at 2025-07-14 (TTAM acquisition) -> new 'Nonprofit Relaunch'; re-dated FDA era 2013-12-01->2013-11-22, Pharma era 2015-01-01->2015-01-06, GSK era 2018-07-01->2018-07-25, SPAC era 2021-06-01->2021-06-17, Breach era 2023-10-01->2023-10-06; Genomics Pioneer kept. All eras re-scored. Since Feb 2026: CA AG sued the former 23andMe (May 2026, alleged ransom and misleading statements); $46.75M class payout approved and $18M 42-state settlement (July 2026); chromosome browser returned premium-only; health reports moved into auto-renewing memberships with higher renewal price; nonprofit relaunch targeting 100M users. Evidence[18] (EPIC) re-keyed d6->d10.
Checked 3 alternatives. MyHeritage: removed false claim that it accepts 23andMe raw data uploads free (uploads ended 2025); added retest requirement, auto-renewing trial and Francisco Partners PE ownership. Ancestry: database size 25M->30M+, kit price $99 list, dropped unsupported stability comparison. FamilySearch verified. Note for fact audit: D4 summary still says 'Rivals such as MyHeritage accept 23andMe raw data uploads', which is no longer true.
Post-re-audit prose correction: D4 summary and D4 narrative no longer say MyHeritage accepts 23andMe raw data uploads; MyHeritage ended DNA uploads from other services in 2025 (MyHeritage help article 'Why can't I upload my DNA data file?'). No score changes.
Checked 12 removed/trimmed claims: 2 restored, 6 partly restored, 4 confirmed removed. Restored: fifth layoff round since 2023 (Entrepreneur), FY2024 revenue $219.6M -27% (23andMe results). Partly: ~30 GSK targets (2020 blog), GIPA sample destruction + insurer ban (SB 41 text), Lemonaid HIPAA gap (Telehealth.org), ~$150M market cap re-dated to Sept 2024 (Fortune), re-subscription and $29->$69 renewal complaints (Gizmodo). Confirmed removed: ~30 pharma partners/privacy researchers, $317M loss/'first of five', Trustpilot page, GetLatka figures.
Triaged 2026-06-29; no rescore warranted (no material change since baseline, or changes sub-threshold).
Added 14 timeline events to fill era×dimension coverage gaps
Fixed false claim that AncestryDNA accepts raw DNA uploads from 23andMe (it does not); added Blackstone PE ownership caveat