Regeneron Tops Bid to Acquire 23andMe After Massive Data Breach
Regeneron Takes the Helm
In a significant move, biotechnology giant Regeneron has won the top bid in a bankruptcy auction for genetic testing service 23andMe. The $256 million acquisition is set to be finalized in the third quarter of 2025, making 23andMe a subsidiary of Regeneron. Despite the change in ownership, 23andMe will continue its current operations and business as usual. This acquisition marks a new chapter for 23andMe amidst recent challenges.
The Data Breach Scandal
Late in 2023, 23andMe faced a major setback when a data breach compromised approximately 14,000 user accounts. Attackers used credential stuffing techniques to access DNA Relative profiles of 5.5 million individuals. The stolen data included sensitive information such as display names, relationships, locations, birth years, and detailed family tree profiles. This breach raised serious concerns about the security of personal genetic information.
Legal Battle and Class Actions
Following the data breach, 23andMe was hit with a wave of class action lawsuits. Plaintiffs alleged that the company failed to protect customer data effectively and did not inform users with Chinese or Ashkenazi Jewish ancestry about the breach. These lawsuits have been successful, allowing affected customers to file claims for a share of the $30 million penalty. The legal troubles further strained 23andMe's financial stability.
Bankruptcy and Its Fallout
Amid declining sales and mounting legal issues, 23andMe filed for bankruptcy in March. This move intensified fears regarding the fate of personal genetic data if the company were to collapse. California Attorney General Rob Bonta advised customers to delete their genetic data due to uncertainties about its future handling. The bankruptcy highlighted the vulnerabilities associated with genetic testing services.
Regeneron's Promise of Security
With Regeneron set to acquire 23andMe, questions arise about the safety of user data under new management. Regeneron has emphasized its expertise in biotechnology and DNA research, pledging to enhance data protection measures. The company committed to complying with 23andMe's privacy policies and relevant laws, ensuring robust privacy programs and security controls. An independent Customer Privacy Ombudsman will oversee these efforts to regain user trust.
Protecting Your Genetic Information
Genetic testing services like 23andMe offer valuable insights into family origins and ancestry with just a simple saliva sample. However, privacy and security remain major concerns. Users must be proactive in safeguarding their accounts by using strong, unique passwords and enabling multi-factor authentication. Understanding the potential risks is essential for anyone considering the use of DNA testing services.
Conclusion
The acquisition of 23andMe by Regeneron signals a hopeful turnaround for the beleaguered genetic testing service. While past data breaches and bankruptcy have shaken consumer confidence, Regeneron's commitment to data security could restore trust. Users should remain vigilant about their genetic data's safety and take necessary precautions. As the industry evolves, balancing genetic discovery with robust privacy protection will be crucial.
Read the full article here:
zdnet.com