23andMe's Chapter 11: When Your DNA Becomes a Bankrupt Asset

In March 2025, 23andMe's collapse put 15 million genetic profiles into bankruptcy court — and the question of whether your DNA could be sold to the highest bidder. The company's implosion wasn't inevitable. It happened because home DNA testing, once a growth engine, failed to generate sustainable revenue, and a 2023 security breach eroded customer trust irreparably. But the damage to 23andMe's balance sheet opened a far darker possibility: what happens to your most intimate biological data when the company holding it runs out of cash?

How 23andMe Went from $6B to Bankruptcy Court

The company went public via SPAC in 2021 at $6 billion valuation. By 2025, it was worth less than $50 million. The collapse stemmed from a trio of cascading failures: the home DNA test market had saturated, destroying growth; a 2023 credential-stuffing breach exposed 6.9 million user records, incinerating trust; and the pharma pipeline—the purported engine for future revenue—never materialized commercially.

On March 23, 2025, 23andMe filed for Chapter 11 in the Eastern District of Missouri. Kroll became the claims and noticing agent. The bankruptcy filing immediately threw open the question of whether the company's most valuable possession—the genetic database itself—could be liquidated and sold to a third party. State attorneys general began warning customers to delete their data before any such transaction could close.

The Data Asset Problem

Bankruptcy law treats data as a corporate asset. Genetic profiles, ancestry reports, health predispositions—all of it can be classified, valued, and sold in the reorganization process. Most bankruptcies involve tangible goods or accounts receivable. 23andMe was different. It was asking whether your DNA itself—the most intimate personal information a human can harbor—becomes an estate asset when the company holding it collapses.

Pennsylvania, California, and Minnesota's attorneys general weighed in aggressively, urging customers to delete accounts and request physical DNA sample destruction before a sale closed. The logic was sound: deletion requests filed pre-sale have legal weight; after a sale closes, you're no longer a customer of 23andMe but rather a data subject of an unknown acquirer.

The Case Timeline & Critical Dates

Two Parallel Claim Processes (Both Deadlines Passed)

Consumers often conflate these two distinct proceedings. They're not the same, and both had tight deadlines that have now expired.

1. The Chapter 11 Bankruptcy Claim

If 23andMe owed you money—for an unshipped kit, wrongfully charged subscription, or other direct damages—you could file a proof of claim in bankruptcy. The bar date was July 14, 2025. Any claim filed after that date is barred unless there's exceptional cause to file late. Kroll administered the claims portal.

2. The Data Breach Settlement (Separate Lawsuit)

The 2023 breach exposed 6.9 million users. A class action settlement ran independently of the bankruptcy. If you were a customer at breach time, you qualified for settlement compensation. That deadline was February 17, 2026—now closed.

Asset Sales & Your Data

In a bankruptcy asset sale, the buyer steps into the seller's shoes under existing privacy obligations—but only until those obligations are modified. New owners routinely seek court permission to amend privacy terms, and judges sometimes grant it if the new use is deemed reasonable. Your leverage evaporates the moment the sale closes; before it, you're a creditor-stakeholder with standing in the court.

That's precisely why state AGs pushed deletion so hard. An FTC that was actively monitoring the situation could challenge an asset sale, but post-closing enforcement becomes exponentially harder. The tactical window for data deletion is pre-closing only.

Privacy Implications of 23andMe's Bankruptcy

The core privacy risk hinges on asset sales. In typical bankruptcies, liquidation is straightforward: sell inventory, equipment, accounts receivable. With 23andMe, the asset is your genetic data. Here's why this matters:

Pre-sale scenario: Your data is governed by 23andMe's privacy policy, which includes deletion rights. You can request permanent deletion, destruction of your DNA sample, and removal from the database.

Post-sale scenario: A new buyer (potentially a pharmaceutical company, biotech firm, ancestry competitor, or data aggregator) steps into 23andMe's shoes. They inherit your data, but they're only bound by pre-closing privacy obligations. New buyers routinely file motions to modify privacy terms post-closing, arguing that the new business model requires different data uses. Courts have sometimes granted these motions, especially if the buyer argues the modifications are "reasonable" in light of the new organization's mission.

Translation: Your genetic data, which you entrusted to a consumer health company, could be resold to a pharmaceutical firm or biotech that uses it for drug development or research—all without your consent post-closing. Deletion requests filed before the sale closes carry legal weight. Deletion requests filed after the sale closes are often ignored or re-evaluated under the new buyer's policies.

What You Can Do Now

The critical window is before any asset sale closes. Here's the action plan:

1. Delete your account immediately: Log in to 23andme.com and navigate to Settings → Account Actions → Delete Account. Confirm the deletion via email.
2. Request DNA destruction: Separately, go to Settings → 23andMe Data → Genetic Information and submit a request to destroy your DNA sample at the lab.
3. Screenshot confirmations: Save email confirmations of both deletion and DNA destruction requests. Timestamp matters. Post-closing, the acquiring buyer's lawyers will examine the timing of deletion requests to determine whether they were filed pre-closing (honored) or post-closing (subject to re-evaluation).
4. Monitor case status: Check the Kroll case portal periodically. If you see announcements of a proposed asset sale, ensure your deletion requests were already filed. If not, file them immediately.

The Data Breach Settlement (Deadline Passed)

The October 2023 breach exposed 6.9 million customer genetic and health profiles to attackers via credential-stuffing attacks. 23andMe didn't disclose the breach immediately; customers discovered it themselves and reported it to news outlets. The company eventually settled a class action for approximately $30 million, split among affected customers.

If you were a customer at the time of breach and had not changed your password or used a re-used password from another service, you likely qualified for settlement compensation. The settlement deadline passed on February 17, 2026. If you missed it, you forfeit the settlement claim—though you may still have standing to pursue a separate bankruptcy claim if 23andMe directly owed you money (for unreceived tests, wrongful charges, etc.).

Bankruptcy Claim Process (Bar Date Passed)

The general bar date for filing proofs of claim in the 23andMe bankruptcy was July 14, 2025. This deadline has closed. If you have an unpaid claim (unreceived test kit, wrongful charge on your credit card, failed refund request), you could have filed a proof of claim. Missing that deadline bars your claim entirely unless the court grants extraordinary late-filing relief.

If you believe you have a valid claim that should have been filed, consult a bankruptcy attorney immediately. Some courts grant limited late-filing relief for creditors who didn't receive adequate notice, but this is rare and fact-specific.

Industry Implications

23andMe's failure revealed a structural tension in the genetic testing business: consumer data was treated as a core asset precisely because nobody knew how to monetize it otherwise. Competitors holding equivalent databases—Ancestry, MyHeritage—face the same solvency questions. Bankruptcy courts have begun recognizing that genetic data occupies a unique legal space: it's property for bankruptcy purposes, yet it's also personal information with constitutional and statutory privacy protections.

Legislators are now considering specialized genetic data protections modeled on healthcare confidentiality frameworks. Several bills pending in Congress would explicitly prohibit bankruptcy asset sales of genetic databases without affirmative consent from data subjects. The debate centers on whether genetic data is fungible property (like inventory) or intrinsically personal information (like medical records). Until laws change, deletion pre-sale is your best protection.