23andMe: from $6B SPAC to Chapter 11 to a nonprofit owned by its founder

The original problem. Anne Wojcicki's thesis, from 2006, was that consumer genetic data at scale would be more valuable than any pharmaceutical company's private dataset, and that consumers would pay for the sequencing that built it. The business model was always: sell tests to fund a database, then monetize the database through drug discovery.

Founder background. Wojcicki was a healthcare investment analyst, married at the time to Google co-founder Sergey Brin, and sister to Susan Wojcicki (later YouTube CEO) and Janet Wojcicki. Google was an early investor. Access was not a constraint at any point in this company's history, and it is worth naming that directly.

The regulatory near-death. In November 2013 the FDA ordered 23andMe to stop marketing its health reports, finding it was selling an unapproved medical device. The company had been non-responsive to the agency for months. It spent roughly two years selling ancestry-only reports while working through FDA authorization, receiving its first health-report clearances in 2015 and 2017. This is the textbook case of a consumer company treating a regulator as an obstacle rather than a stakeholder, and it cost the company two years at a critical moment.

Business model failure. The structural flaw was visible from the beginning and never solved: a genetic test is a one-time purchase. You sequence your genome once. 23andMe never built a recurring product that customers valued — subscriptions (23andMe+) had weak attach and retention — so revenue depended on continuously acquiring new first-time customers in a market that saturated. Meanwhile the therapeutics arm, a JV with GSK signed in 2018, produced no approved drugs on the timeline investors had priced in.

Funding and the SPAC. Roughly $800M privately, then a de-SPAC merger with Richard Branson's VG Acquisition Corp in June 2021, valuing the company around $3.5B and peaking near $6B shortly after. The stock fell more or less continuously thereafter.

The breach. In October–December 2023, a credential-stuffing attack exposed data on approximately 6.9 million users, including the "DNA Relatives" profiles. The company's initial response — blaming users for reusing passwords — was widely criticized. Settlements and regulatory action followed.

Bankruptcy and the ending. In September 2024 all seven independent directors resigned in a bloc, citing a strategic disagreement with Wojcicki over her take-private proposals — an almost unheard-of governance event. 23andMe filed Chapter 11 in March 2025, and Wojcicki resigned as CEO. Regeneron bid $256M for the assets. Wojcicki's newly formed nonprofit, the TTAM Research Institute, then outbid Regeneron at $305M and won the auction, with court approval in July 2025 over objections from a coalition of 28 state attorneys general concerned about the transfer of genetic data (STAT, June 2025; Bio-IT World, July 2025) [Verified — bankruptcy court record].

Current status (September 2026). 23andMe operates as a nonprofit under TTAM, led by Wojcicki, continuing consumer testing and research. Public shareholders were wiped out. The founder ended up owning the company again for roughly 5% of its SPAC valuation.

Lessons that generalize.

1. One-time-purchase consumer products are structurally unsuited to venture scale, because the growth model requires permanently rising new-customer acquisition against a fixed addressable population. This was knowable in 2007 and was papered over by the drug-discovery story for fifteen years.
2. Custodial data is a liability that compounds. 23andMe's most valuable asset and its most dangerous one were the same thing. Any company whose moat is a sensitive dataset should assume a breach will happen and plan the response before it does.

---