Direct answer: 23andMe's core problem was that DNA testing is a one-time purchase, not a subscription service. Once a customer tests, they have no reason to test again. The company attempted to convert customers to health subscription products and monetize its genetic database for drug discovery partnerships, but subscription conversion rates were low and research partnerships generated far less revenue than projected. A September 2023 data breach exposing the genetic data of nearly 7 million customers compounded the problem by undermining trust in the company's data stewardship. CEO Anne Wojcicki attempted a take-private in 2024 while the company pursued bankruptcy protection.
23andMe Investment Autopsy: What Actually Went Wrong?
The investment
Category: Consumer Biotech Failure
Era: 2021-2024
Primary failure mechanism: one-time revenue / no subscription conversion / data liability
What investors believed
23andMe would leverage its 12 million customer genetic database to generate recurring subscription health revenue and lucrative pharmaceutical research partnerships. The genetic database was described as a proprietary asset that would compound in value as the dataset grew.
What broke
Customers tested once and churned from the subscription product at high rates. Drug discovery partnerships with GSK, while real, generated far less revenue than the TAM projections implied. The data breach created regulatory and trust exposure. The subscription product required continuous feature development that the revenue base could not fund.
Warning signals that were visible
- SPAC listing rather than traditional IPO limiting disclosure scrutiny
- No subscription business with meaningful scale at IPO despite 12 million DNA profiles
- One-time purchase economics inherently limit lifetime customer value versus subscription projections
- GSK partnership terms disclosable - revenue below projections required to justify valuation
Transferable lessons
- Revenue from one-time purchases cannot be modeled as recurring without demonstrated subscription conversion
- A proprietary data asset requires a demonstrated monetization mechanism before commanding premium valuation
- SPAC projections are aspirational; verifying their assumptions requires the same rigor as traditional IPO analysis
- Privacy regulation risk for genetic data is higher than for behavioral data and warrants specific discount
Frequently Asked Questions
What was the GSK partnership and did it generate value?
23andMe announced a $300 million collaboration with GlaxoSmithKline in 2018, giving GSK exclusive access to 23andMe's genetic database for drug discovery for four years. The partnership represented validation of the database's research value and generated significant immediate capital. The collaboration produced some research progress but did not generate the drug discovery pipeline and royalty revenue streams that long-term value creation required. The partnership expired and was not renewed on comparable terms. Drug discovery requires ten-plus year timelines and most candidates fail in clinical trials, meaning genetic database partnerships generate research value over very long horizons that are difficult to price in near-term valuations.
How did the data breach affect 23andMe?
In October 2023, 23andMe disclosed that hackers had accessed approximately 14,000 user accounts through credential stuffing attacks, then used those accounts to scrape data on approximately 6.9 million customers through the company's DNA Relatives feature that allows connected family members to see each other's profiles. Exposed data included ethnic heritage and potential relative matches. The breach was particularly sensitive because genetic data is permanent: unlike a compromised password, genetic information cannot be changed. 23andMe faced approximately 30 class action lawsuits and regulatory investigations. The company's privacy standards and incident response were scrutinized, and the breach further eroded consumer trust in sharing genetic information with consumer companies.
What happened to customer data in the bankruptcy?
23andMe filed for Chapter 11 bankruptcy in March 2025. The disposition of its customer genetic database in bankruptcy proceedings raised significant consumer protection concerns. Unlike typical customer data, genetic information has implications not just for the individual but for biological relatives. California Attorney General Rob Bonta issued guidance urging California customers to delete their data and request sample destruction before any bankruptcy sale. The bankruptcy case highlighted a gap in consumer protection law regarding the treatment of sensitive biometric data when a company holding it fails, as genetic data sold to a new owner may be governed by different privacy terms than the original consent.