"Cybercriminals can use it to target consumers with convincing scams and social engineering tactics, such as fraudulently claiming someone is a blood relative to another person or to send deceptive messages about their potential health risks," Clay said. "Organizations who go bankrupt should ensure the security and privacy of their customer's data is critical, and any sharing or selling of data to others should not be done," he added.
But other experts say the lesson of 23andMe is less about the company's collapse and the threat to privacy that created than serving as a reminder about the everyday cyber hazards related to personal information.