The ancestry-testing company 23andMe has had a hard go lately. First, in 2023 a data leak at the company exposed millions of customers’ personal information—inhcluding genetic information—to hackers. As Wikipedia reports:
The cyberattack gathered profile and ethnicity information from millions of users. The affected customers were reported as primarily Ashkenazi Jews but also including hundreds of thousands of ethnically Chinese users. The hacker(s) stole information customers had chosen to share with their DNA matches, which could include name, profile photo, birth year, location, family surnames, grandparents’ birthplaces, ethnicity estimates, mitochondrial DNA haplogroup, Y-chromosome DNA haplogroup, link to external family tree, and any text content a customer had optionally included in their “About” section. On October 6, 2023, the company confirmed that the hacker(s) had illicitly accessed data on approximately 6.9 million users.
And now the company is going to sell off its genetic data to a new company, TTAM Research Institute. We were informed by 23andMe (I was a customer), that we could have our genetic data deleted before the sale, and I naturally did this; I believe I urged customers somewhere on this site to delete their data, too (you can always use a different company in the future). But 23andMe is now subject to a lawsuit involving this sale:
Twenty-seven states and the District of Columbia have sued the genetic-testing company 23andMe to oppose the sale of DNA data from its customers without their direct consent.
The suit, filed on Monday in U.S. Bankruptcy Court in the Eastern District of Missouri, argues that 23andMe needs to have permission from each and every customer before their data is potentially sold. The company had entered an agreement to sell itself and its assets in bankruptcy court.
The information for sale “comprises an unprecedented compilation of highly sensitive and immutable personal data of consumers,” according to the lawsuit.
The CEO of the company was promptly dragged before a Senate committee to explain what 23andMe were going to do with the data, and his performance, as you’ll see in the eight-minute video below, was abysmal; he wriggled like a caught eel.
This wiggling and evasion from CEO Joseph Selsavage is even more waffle-y than was the testimony of the MIT, Harvard, and Penn Presidents before Congress (actually, the Presidents answered accurately, but it wasn’t good enough for Representative Elise Stefanik). A reader sent me the link to the new
video with this comment:
I thought you might be interested in this. You recommended that readers who used 23&Me to conduct genetic analysis might want to delete their data after the company claimed bankruptcy and intend to sell this data to Regeneron for $300M [JAC: see above, TTAM won the bidding over Regeneron.] I followed your sound advice.
Very disconcerting is this hearing where Senator Josh Hawley absolutely hammers the CEO of 23&Me about whether they are actually deleting our data or not even after instructed by customers to do so. It’s not clear if they are actually permanently expunging our data records or not given the waffling but how outrageous if they are not:
Here’s the caption for the YouTube video, which was posted on June 12:
At today’s Senate Judiciary Committee hearing, Sen. Josh Hawley (R-MO) questioned interim 23andMe CEO Joseph Selsavage.
Oy vey! Look at Selsavage equivocate and squirm! It’s a pathetic and reprehensible performance. And only Ceiling Cat knows what TTAM will do with our data. (Since I asked for mine to be deleted, Regeneron presumably doesn’t have it, but Selsavage isn’t at all clear about that.) Hawley is civil but also persistent, and manages to show up Selsavage as somewhat of a liar.







