"The situation is troubling": Oklahoma AG Drummond issues an alert for 23andMe customers as company plans on selling data to highest bidder

The popular genetic testing company 23andMe is in serious financial trouble. In March 2025, it filed for bankruptcy protection and announced plans to sell most of its assets. These assets may include the genetic profiles of more than 15 million customers.

Oklahoma Attorney General Gentner Drummond has issued a consumer alert. He is warning people who used 23andMe that their personal data could be sold to unknown companies. Many customers may not be aware that their private information could be shared in this way. As per a report published in Fox 23 News on May 9, 2025, he was concerned, and said:

"The implications of 23andMe selling genetic information to the highest bidder are understandably very concerning to Oklahomans who have used the company's services," Drummond said. "While the situation is troubling, there are easy steps that consumers can take to proactively safeguard their privacy."

This development has raised concerns about how genetic data might be used. There is no strong federal law to stop this kind of sale. Some state laws offer protection, but many do not go far enough. That is why AG Drummond is advising customers to act quickly.

What is happening with 23andMe?

According to a News on 6 article published on May 9, 2025, in late March 2025, 23andMe filed for bankruptcy. As part of the process, the company said it wanted to sell “substantially all of its assets.” This includes its large database of genetic information. The database contains personal data from millions of customers who used the service to learn about their health and ancestry.

This genetic database is one of the company’s most valuable assets. Possible buyers include data brokers, insurance companies, drug makers, and healthcare firms. The buyers may use the data for research, marketing, or business decisions. Some uses may go beyond what customers had agreed to when they first signed up.

There is no federal law that fully protects this kind of personal genetic data. The Health Insurance Portability and Accountability Act (HIPAA) does not apply to companies like 23andMe. This means there are few rules on how these companies can share or sell the data.

Read More: New Superman image drops, sparking electrifying buzz among fans

Why should customers be concerned?

Customers may have shared sensitive information with 23andMe, thinking it would stay private. But if the data is sold, it could be used in ways customers never expected. For example, a buyer could use it for research without permission. It might also be used for marketing or to evaluate health risks.

There is also the risk that insurance companies or employers could access the data. This could lead to discrimination or unfair treatment. While some laws exist to prevent this, they are not always strong or clear.

Some states like California, Texas, and Virginia have laws that give people rights over their genetic data. But these laws vary and may not protect everyone. Also, 23andMe’s own terms of service allow data to be passed to future owners. This means the company may not need extra permission from customers to include their data in a sale.

Read More: “A man of honor”: Netizens proud as Save The Children Korea’s IG story confirms BTS' Taehyung wearing ‘SaveOne’ activist bracelet

What can customers do to protect their data?

Attorney General Drummond and privacy experts suggest customers act fast. If one is a 23andMe user and does not want their data sold, one should take a few key steps through their online account.

First, they should delete the genetic data and the account. They can log into their profile, go to “Settings,” scroll to “23andMe Data,” and click on “View.” There, one can choose to delete their data. One must make sure to confirm through the email they send.

Second, if one had chosen to store their saliva sample, one should request that it be destroyed. This option is under “Preferences” in their settings. Removing the sample can help prevent future use of someone's DNA.

Third, a customer can withdraw their consent for research. This can be done by going to “Research and Product Consents” and removing their approval. This stops 23andMe from using their data in new research projects.

Read More: Marry My Dad and Become My Mom': Rosie O'Donnell says she dreamed of Julie Andrews marrying her dad

The sale of the company's assets, including genetic data, has raised serious concerns. With no strong federal law to protect consumers, people may lose control of their most personal information. Attorney General Drummond’s alert is a warning to act now.

×

Was this article helpful?

Thank You for feedback