← Back to News

15 Million Genomes Sold: What 23andMe's Bankruptcy Reveals About Genetic Data Stewardship

When 23andMe declared bankruptcy, it sold the genetic data of 15 million customers to a 'nonprofit' created by its own CEO. Unzyme Laboratories explains how we handle genetic data differently—and why that difference matters.

In March 2025, 23andMe declared bankruptcy. By the time proceedings concluded, the genetic data of more than 15 million people had been transferred to TTAM Research Institute—a nonprofit organization created by 23andMe’s founder and longtime CEO.

Fifteen million genomes. Complete genetic blueprints of fifteen million humans. Sold.

The transaction was legal. The data transfer followed bankruptcy procedures. The nonprofit claims research purposes. And fifteen million people who spit into tubes expecting consumer genetic testing discovered that their most personal biological information had become an asset to be liquidated.

Unzyme Laboratories has observed this situation with professional attention and, we admit, some frustration. The 23andMe bankruptcy reveals failures that we have spent years avoiding—failures that damage public trust in genetic services broadly.

What Went Wrong

The 23andMe model contained structural problems that made this outcome predictable:

Data as Business Asset. 23andMe treated customer genetic data as a corporate asset. This classification meant the data followed standard bankruptcy procedures—it could be sold, transferred, or liquidated like inventory or equipment. The data’s intimate nature did not exempt it from commercial disposition.

Consent Assumptions. Customers consented to 23andMe’s privacy policy. When ownership transferred, that consent was presumed to transfer as well. Whether customers would have consented to TTAM Research Institute specifically is a question that was never asked.

No Destruction Option. Bankruptcy procedures prioritize creditor recovery. Destroying valuable data to protect customer privacy would have reduced estate value. The legal framework provided no mechanism for customers to demand data destruction rather than transfer.

Nonprofit Misdirection. TTAM Research Institute’s nonprofit status implies benevolent purpose. But nonprofits can partner with for-profit entities, license data commercially, and pursue objectives that customers might not support. The nonprofit structure provides legal flexibility, not ethical guarantee.

These problems are not unique to 23andMe. They exist throughout the direct-to-consumer genetic testing industry. Every company that collects genetic data and treats it as a corporate asset creates similar risks.

How Unzyme Laboratories Differs

Our approach to genetic data reflects different foundational assumptions:

Patient Data, Not Corporate Asset. We do not classify patient genetic information as corporate property. Our legal structure treats genetic data as held in trust for patients, not owned by Unzyme Laboratories. In bankruptcy—which we do not anticipate—this classification would prevent data from being liquidated as an asset.

Jurisdiction Selection. Our primary genetic data repositories are located in jurisdictions with strong privacy frameworks that supersede commercial law. Even if our corporate structure were compromised, local law would prevent data transfer without explicit patient consent.

Destruction Guarantees. Patients can request complete data destruction at any time. Upon request, we delete all genetic information from all systems, including backups. We provide cryptographic verification of destruction. This right is contractual and survives any corporate transition.

Separation of Functions. Our genetic analysis systems are architecturally separated from corporate systems. The infrastructure that processes genetic data cannot be accessed through standard corporate channels. This separation prevents scenarios where corporate transactions inadvertently compromise genetic data.

No Consumer Model. We do not operate a consumer genetic testing business. Our patients undergo genetic analysis as part of comprehensive enhancement protocols, not as a standalone product. This means we have no incentive to monetize data separately from patient care.

These measures cost money. They reduce flexibility. They complicate operations. We implement them because genetic data is not a product. It is a responsibility.

What Genetic Data Reveals

The 23andMe situation is troubling because of what genetic data contains:

Disease Predispositions. Genetic variants associated with cancer, Alzheimer’s, heart disease, and countless other conditions. Information that could affect insurance, employment, and relationships if disclosed.

Family Relationships. Genetic data reveals biological parentage, sometimes contradicting family narratives. It identifies relatives, including those who never consented to identification.

Ethnic Heritage. Ancestry information that some individuals may prefer to keep private, particularly in contexts where ethnic background affects social treatment.

Future Discoveries. Genetic data does not expire. As science advances, today’s data will reveal things we cannot currently predict. Information collected for ancestry curiosity may later indicate disease risks not yet understood.

Fifteen million people trusted 23andMe with this information. That trust has been transferred to an organization they did not choose, for purposes they did not evaluate, with protections they cannot verify.

The Regulatory Gap

States are now scrambling to pass genetic privacy legislation. Vermont’s H.639, Connecticut’s pending bill, and similar efforts across the country attempt to prevent future 23andMe situations.

These efforts are welcome but belated. They also illustrate a pattern: regulation follows disaster rather than preventing it.

Unzyme Laboratories does not wait for regulation to impose standards. We implement protections that exceed any current legal requirement because we understand what genetic data represents. We expect future regulation to catch up to our current practices, not to force us to improve.

A Question for Consumers

Those who used 23andMe—or any direct-to-consumer genetic testing service—should ask:

Where is my data now? Who has access? What prevents future transfer? Can I demand destruction?

For most services, the honest answers are uncomfortable.

For Unzyme Laboratories patients, the answers are documented, contractual, and enforceable.

We recognize that our services are not consumer genetic testing. We serve patients seeking enhancement, not customers curious about ancestry. But the principle applies broadly: genetic data requires stewardship, not exploitation.

The 23andMe bankruptcy demonstrates what happens when that principle is ignored. Fifteen million genomes, sold.

We do better. We must.


Related: Review Unzyme Laboratories’ data collection notice and privacy commitments. For questions about how we handle genetic information in enhancement protocols, contact our patient advocacy team.


Sources: Villanova University: 23andMe’s Bankruptcy Exposes Fragility of Genetic Data, Science: The Precarious Future of Consumer Genetic Privacy, Inside Privacy: States Introduce Genetic Privacy Bills