California Attorney General Rob Bonta has issued an “urgent” alert to customers of 23andMe after the genetic testing company filed for bankruptcy Sunday, recommending they delete their genetic data immediately.

California has relatively strict privacy laws that give consumers the power to have their personal data deleted. Given the sensitive nature of 23andMe’s data, which includes physical samples of genetic material, customers would be well advised to invoke their rights, Bonta recommended.

The company has been in and out of financial trouble since it went public in 2021 and laid off 40% of its workforce in November 2024, ahead of a possible sale in January of this year.

A 2023 data breach didn’t help allay customer privacy fears. Hackers accessed the personal data of nearly 7 million users, leading to a lawsuit and $30 million settlement.

23andMe co-founder and CEO Anne Wojcicki resigned ahead of the bankruptcy announcement, writing in a message on social media Monday that she did so as a means to potentially acquire the company as an independent bidder.

“We have had many successes but I equally take accountability for the challenges we have today,” Wojcicki said. “There is no doubt that the challenges faced by 23andMe through an evolving business model have been real, but my belief in the company and its future is unwavering.”

Wojcicki noted that 85% of 23andMe customers allowed their data to be used for research purposes, leading to 50 collaborative works with the pharmaceutical company GSK.

A company spokesperson told HuffPost that despite Attorney General Bonta’s warnings, 23andMe isn’t changing the way it stores, manages or protects customer data, and that the company “will look to secure a partner who shares in its commitment to customer data privacy.”

If that assurance doesn’t meet your muster, here’s how to request the California company delete your data, courtesy of the California attorney general’s office:

To Delete Genetic Data From 23andMe:

1. Consumers can delete their account and personal information by taking the following steps:
2. Log into your 23andMe account on their website.
3. Go to the “Settings” section of your profile.
4. Scroll to a section labeled “23andMe Data” at the bottom of the page.
5. Click “View” next to “23andMe Data.”
6. Download your data: If you want a copy of your genetic data for personal storage, choose the option to download it to your device before proceeding.
7. Scroll to the “Delete Data” section.
8. Click “Permanently Delete Data.”
9. Confirm your request: You’ll receive an email from 23andMe. Follow the link in the email to confirm your deletion request.

To Destroy Your 23andMe Test Sample:

If you previously opted to have your saliva sample and DNA stored by 23andMe, but want to change that preference, you can do so from your account settings page, under “Preferences.”

To Revoke Permission For Your Genetic Data To Be Used For Research:

If you previously consented to 23andMe and third-party researchers to use your genetic data and sample for research, you may withdraw consent from the account settings page, under “Research and Product Consents.”