Overview
- TTAM Research Institute, led by Anne Wojcicki, secured substantially all of 23andMe’s assets with a $305 million bid that outpaced Regeneron Pharmaceuticals
- The UK Information Commissioner’s Office imposed a £2.31 million penalty on 23andMe for failing to protect the data of more than 155,000 UK customers during the April–September 2023 breach
- A joint inquiry by UK and Canadian privacy regulators found that 23andMe lacked multi-factor authentication, had weak password requirements, and responded slowly to warning signs of the cyberattack
- More than two dozen US states and several attorneys general have filed lawsuits aiming to block the sale of customer genetic data and biological samples under the bankruptcy proceedings
- TTAM has committed to honor existing data protections, allow users to delete accounts and opt out of research, and implement enhanced safeguards under its nonprofit ownership