A federal judge has ruled that 23andMe must pay $47 million to victims of a 2023 data breach that exposed the genetic information of roughly 7 million people. The company, which built its entire business model on convincing millions of Americans to mail in their saliva in exchange for the privilege of learning what percentage of them is Scandinavian, has now discovered that intimate biological data is worth approximately $6.71 per exposed person.
This is the free market working exactly as intended. You voluntarily handed over your DNA—the actual blueprint of your existence—to a private company in exchange for a report telling you that you have a 2% chance of going bald and an ancestor from Poland. The company lost it. The court said: here is six dollars and seventy-one cents. Consider yourself made whole.
The real comedy is not the payout itself, which is genuinely insulting, but the original transaction. We live in an era where people treat genetic testing kits like personality quizzes, casually uploading the one piece of information that cannot be changed, cannot be deleted, and cannot be un-hacked. Your password can be reset. Your credit card can be canceled. Your DNA is yours forever, now also available in a database somewhere, possibly on the dark web, definitely in a spreadsheet that someone’s cousin’s friend has access to.
23andMe did not get hacked because it was reckless with your data. It got hacked because you gave it to them in the first place, and that fundamental absurdity is worth far more than $47 million to contemplate. The payout is not compensation. It is a reminder that the real cost of self-knowledge in the modern age is paid in currency you cannot see.