Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label data deletion. Show all posts

23andMe Faces Uncertainty After Data Breach

 

DNA and genetic testing firm 23andMe is grappling with significant challenges following a 2023 data breach and its ongoing financial downturn. Once a leader in the industry, the company now faces an uncertain future as it considers going private, raising concerns about the security of genetic data for its 15 million customers.

Known for its saliva-based genetic ancestry tests, 23andMe has seen its market value plummet by over 99% since its $6 billion high in 2021, largely due to unprofitability. This lack of profit is attributed to declining consumer interest in its one-time-use test kits and sluggish growth in its subscription services. Compounding these issues was a lengthy data breach in 2023, where hackers stole genetic data from nearly 7 million users. In September, the company agreed to pay $30 million to settle a lawsuit related to the breach.

Shortly after the settlement, 23andMe CEO Anne Wojcicki mentioned the possibility of third-party takeover offers but later clarified her intent to take the company private. The initial statement, however, led to the immediate resignation of the company's independent board members, amplifying concerns about the future handling of customer data.

Many customers may assume their genetic data is protected by health privacy laws, but 23andMe is not bound by the Health Insurance Portability and Accountability Act (HIPAA). Instead, the company follows its own privacy policies, which it can alter at any time. According to a company spokesperson, 23andMe believes its data management practices are more appropriate and transparent compared to the traditional healthcare model under HIPAA.

The lack of strict federal oversight and varying state privacy laws means that in the event of a sale, the genetic data of millions could be up for grabs. Wojcicki has signaled a shift in the company's business strategy, halting costly drug development programs to focus on monetizing its customer data for pharmaceutical research.

While 23andMe asserts its data privacy policies would remain unchanged even if sold, privacy advocates have raised alarms. The Electronic Frontier Foundation (EFF) has warned that selling the company to entities with law enforcement ties could lead to misuse of sensitive genetic information.

For those concerned about the future of their data, 23andMe allows users to delete their accounts, though some data may still be retained under legal and compliance requirements.

Unmasking the Secrets of File Deletion: What Really Happens When You Hit Delete?

 

Developing a routine of periodically clearing out unnecessary files from your computer is considered a beneficial practice. This includes items like work-related images or old chat logs that no longer serve an immediate purpose. 

These superfluous files can be swiftly disposed of by placing them in the recycling bin, followed by ensuring the bin is emptied before shutting down the computer for the day. This not only creates more operating space on the hard drive but also maintains a clean and organized file system, ultimately enhancing overall computer performance.

Yet, it's crucial to acknowledge that our hard drives are not mystical voids where files vanish into thin air. They are tangible devices composed of writable discs and intricate circuitry, where data is magnetically inscribed. While erasing a file may seem like a straightforward removal, the process is more intricate than it appears.

Each time a new file is created or downloaded, its data, encompassing its content and registry, is physically etched onto the hard drive's disc. 

Consequently, the storage capacity is finite, as every morsel of accumulated data necessitates physical inscription. It's vital to understand that this process is irreversible - data etched into a drive cannot simply be "unwritten." This begs the question: what happens to the files?

When a file is placed in the recycling bin and subsequently emptied, it isn't truly obliterated in the literal sense. Instead, the file's registry is eliminated, rendering it invisible to the user, while also reserving the space for potential overwriting. 

Essentially, the file persists in its original form until a new file is generated or downloaded and etched onto the same area of the drive, replacing the original. Analogously, this can be likened to flagging a house for demolition - the house endures until it is razed, and a new structure is erected in its place.

It's worth noting that this exclusively pertains to conventional hard drives. Solid-state drives employ a different data storage method, ensuring full deletion upon command.

For everyday computer usage, this differentiation isn't particularly significant. When a file is deleted, the reclaimed space is classified as available, allowing for new data to be stored there, even if the original information remains physically intact.

However, it's imperative to bear in mind that the persistence of deleted data holds significance from both safety and security standpoints. In the event of an inadvertent deletion of a crucial file, specialized programs can be employed to recover it, as long as the space hasn't been overwritten by new files. A data reconstruction tool can reconstruct the registry and reinstate the file to its prior state.

Regrettably, this knowledge can be exploited malevolently. If an unauthorized individual gains access to a computer, they can utilize these same data reconstruction tools to extract sensitive information from files that were assumed to be completely removed.

In general, ordinary deletion suffices for routine computer maintenance. However, when it comes to safeguarding sensitive data, it is advisable to either encrypt it or employ a data destruction tool for both deletion and overwriting to ensure it cannot be resurrected.