Judge OKs sale of 23andMe — and its trove of DNA data — to a nonprofit led by its founder

A bankruptcy judge has approved the sale of the insolvent genetics firm 23andMe to TTAM Research Institute, a nonprofit founded by co-founder Anne Wojcicki, for $305 million. This resolution, which saw TTAM outbid Regeneron Pharmaceuticals, largely mitigates prior outcry from states concerned about the controversial transfer of 23andMe's extensive DNA data to a commercial entity, as TTAM pledges to use the data for medical research under existing privacy policies. The ruling, while not universally accepted by all states, highlights the complex and evolving legal landscape surrounding genetic data ownership and privacy in bankruptcy, signaling potential future regulatory scrutiny and legislative initiatives in data protection.

Analysis

A U.S. bankruptcy court has approved the sale of insolvent genetics firm 23andMe to TTAM Research Institute, a nonprofit founded by the company's co-founder Anne Wojcicki, for $305 million. This outcome resolves a contentious situation that began when an initial $256 million bid from Regeneron Pharmaceuticals (REGN) was challenged by over two dozen states. The states' primary objection was the transfer of a vast and sensitive DNA database to a commercial third party. The winning bid from TTAM, an entity committed to using the data for medical research under existing privacy policies, effectively satisfied the concerns of most state attorneys general. However, residual legal risk remains as five states, including California and Texas, continue to oppose the sale. The case highlights the fundamental weakness in 23andMe's 'one-and-done' business model and the severe financial repercussions of its 2023 data breach, as the sale proceeds are noted as potentially being just sufficient to compensate creditors, including breach victims. The judge's ruling underscores a significant legal gray area regarding the ownership and protection of genetic data in bankruptcy, signaling a high probability of future legislative and regulatory scrutiny in the data privacy sector.

Key Decisions for Investors

• For investors in Regeneron (REGN), the failed acquisition is a minor negative development, representing a lost opportunity to acquire a unique data asset, though it also allows the firm to avoid the associated legal liabilities and public controversy.
• The heightened legal and regulatory barriers encountered in this sale signal increased M&A risk for companies targeting firms with large, sensitive consumer data sets; investors should factor in potential for similar challenges and devalued data assets in future transactions within the biotech and data-driven sectors.
• This case underscores the material financial impact of cybersecurity failures, as 23andMe's data breach directly eroded trust and complicated its bankruptcy resolution, reinforcing the need for investors to scrutinize the data security and privacy protocols of portfolio companies as a core component of risk assessment.