23and…You May Be Up For Sale

January 3, 2025

23andMe, the DNA testing company, is struggling to stay afloat for their 15 million customers. After the entire board of directors recently quit, the lone CEO is considering selling the company to the highest bidder. So, for all those who’ve handed over their DNA to 23andMe, know your privacy is at risk. It’s time to delete that DNA profile, and here’s why.

The Fine Print

For 23andMe clients, the unique DNA marker setting them apart from the rest of the world could fall into new hands. Even though the company’s privacy policy promises not to share their clients’ DNA contents, a new owner won’t be held to that same commitment. Once 23andMe is sold, your DNA and all it reveals about you (and your family tree) goes with it. Unfortunately, HIPPA, the federal law protecting sensitive health information, doesn’t apply to 23andMe.

Fortunately, there’s something you can do about it, and that is deleting your DNA results from 23andMe before the company hits the auction block. Once sold, your DNA belongs to the buyer, who may sell it to other buyers, who then may sell it to other buyers…you get the idea. So, if you want to be in sole control of your DNA profile, it’s time to start deleting.

Deleting Your DNA

Removing your DNA data from 23andMe is painless with a few simple steps. But first, if you’d like a transcript of your file, go to your account settings and request it before you delete your account. Following these next steps gets your DNA profile back where it belongs—with you only!

Sign in and click your account icon (top right, should be a circle with your initials). Go to account settings (Now is the time to request a transcript)
Under the heading “23andMe Data” locate and choose “Delete Your Data” (It is at the bottom of the page)
Once done, data deletion begins, and after that your account will no longer exist

At a time when data breaches threaten our privacy daily, it’s nice to know we can take some of it back. For those with 23andMe accounts, the time to do it is now—so don’t wait.

Education

Ways To See If Your Data Has Been Stolen

With all the data breaches, whether by intrusion or accident lately, it’s likely your information was exposed somehow to someone you didn’t intend. After all, the marketing company Exactis, exposed hundreds of traits on us in 350 million records. Yahoo let out email addresses and passwords on billions of people, and of course who can forget the massive breach of Equifax just last year. There is a lot of information that gets leaked on us and the more the bad actors have on us, the more targeted their phishing campaigns can be. Checking on whether or not your data is available in the underground can help you mitigate any fraud or identity theft. READ FULL STORY

Identity Theft

The Most Massive Data Breaches In The U.S.—So Far

These days, news of massive data breaches is no longer as shocking as it used to be. It’s been non-stop news for so long that Americans are becoming numb to these crimes. But when billions of records so far this year have been hijacked by cybercriminals, these mega breaches are serious business—especially for the victims. Below is a closer look at some of the biggest data breaches (so far) this year and some brief notes on what you can do to help protect yourself from cybercrimes. READ FULL STORY

Identity Theft

One Third of US Might Be Impacted By Massive Healthcare Breach

It’s called PHI, or protected health information, and a recent ransomware attack that put valuable data at high risk of public exposure. Change Healthcare, a subsidiary of insurance titan UnitedHealth Group, was the target of such an attack. The company provides its services to a massive number of hospitals, doctors, and pharmacies across the U.S., involving untold amounts of PHI belonging to roughly half of all Americans. Although the company was not quick to inform customers as to exactly what was compromised, there are common elements collected as part of patient PHI including SSN, birthdate, and medical conditions and treatments. READ FULL STORY

Identity Theft

2024 HIPAA Rules Promote Data Privacy, Cyber Awareness Training

The 2024 HIPAA requirements for healthcare organizations include a focus on patient data privacy and cyber incident preparedness. It's a welcome change with new compliance that all Americans can be happy about, especially when their PHI (protected health information) is better guarded from cybercrime. Here's a quick summary of a few that may affect you and the organization you work for including bolstering employee awareness, incident response, and more data privacy. READ FULL STORY

Identity Theft

4 Million 23andMe Users Breached

The place to follow your ancestral roots, 23andMe, suffered another breach exposing the sensitive data of its users. According to the company, the threat actor gained access to those who used the “DNA Relatives” feature. The genetic testing company learned about the heist after the hacker posted records belonging to four million users on an underground forum. The trove of breached PII (personally identifiable information). The good news? Although 23andMe is still investigating the breach, it claims the incident wasn’t the result of any system security failures. The bad news? It's your passwords to blame. READ FULL STORY

Email Address

Create a new Verification Phrase Enter any word or words you like.
The email newsletter will arrive from news@stickleyonsecurity.com Please wait...