DNA-testing firm vanishes with highly sensitive customer genetic data
In yet another blow to the DNA-testing industry, Atlas Biomed, a London-based genetic firm with links to Russia, has disappeared without any warning. The BBC reports that customers’ sensitive data extracted from biological samples is now in limbo.
Image by Cybernews.
In yet another blow to the DNA-testing industry, Atlas Biomed, a London-based genetic firm with links to Russia, has disappeared without any warning. The BBC reports that customers’ sensitive data extracted from biological samples is now in limbo.
“From ordering the kit, to receiving your results online, your personal data is kept protected during each stage,” Atlas Biomed claimed on the now-defunct website.
“User Data are securely stored on certified servers located within the European Union. SHA-256 with RSA Encryption. Full UK GDPR and EU GDPR compliance. Registered with the Information Commissioner's Office.”
The clients can no longer access their accounts or retrieve reports, and the firm itself appears to have ‘vanished.’
“I have a history of 16 tests I can't now access, hundreds of pounds invested, but the data wasn't downloadable, so relying on the website,” a Facebook user commented on the company’s post nine months ago.
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
Other customers reported paying for subscriptions or tests without receiving services. Soma labeled the company a scam. Atlas Biomed hasn’t posted anything on any of its social media accounts for more than a year now.
The BBC was the first to report the mystery surrounding the DNA-testing firm. The company has not responded to the BBC’s request for comment, but the Information Commissioner’s Office has received complaints about it. The firm’s financial accounts are now overdue, but it is still listed as active with the UK’s Companies House.
Cybernews attempted to reach out to the CEO, Sergei Musienko, to no avail.
The most sensitive information in limbo
The firm’s clients now have no clue what happened to their personal information.
Atlas Biomed collected a vast trove of sensitive data, including phone numbers, emails, addresses, cookies and website usage, health and lifestyle information, and biological samples. It also derived genetic data and interpretation results.
“These include health, nutrition, sports, ancestry, and personal traits data which are derived from interpretation of your health and lifestyle information and raw data and which we display to you in your personal account,” the privacy policy reads.
Malwarebytes Labs found no evidence that any of the data has been misused but noted that “it is worrying to not know who now has access to the data, especially now that the investigation shows that there might be ties to Russia.”
Four out of eight company officers have resigned, and the two remaining are listed at the same address in Moscow. The address is linked to a Russian billionaire who previously resigned as director.
“DNA testing has become so commonplace that many people have blindly participated without truly understanding the implications. It has always been a problem to figure out who you could trust with your genetic data. For some people, it’s their cheapest chance of finding out whether they are affected by some genetic disorder,” Malwarebytes Labs said.
This mystery adds to the uncertainty surrounding genetic data security. In 2018, an incident at MyHeritage exposed 92 million users’ emails and hashed passwords. In 2020, the investment firm Blackstone's acquisition of Ancestry raised concerns about the potential commercialization and data transfers.
Last year started the ongoing saga surrounding 23andMe, which experienced a data breach affecting about 6.9 million users. This week, 23andMe announced major layoffs and financial struggles.
The security firm recommends researching the genetic companies you want to trust with your most sensitive data before submitting biological samples. Lying is also an option.
“Only share the personal information you absolutely have to provide with the genetic testing company. Lie if you must and create a separate free email account so the information can’t be tied to your main account,” Malwarebytes said.
There are worries that DNA testing, while offering valuable personal discoveries, also creates permanent digital records that can be misused for insurance discrimination, targeted marketing, such as Alzheimer’s or cancer preventative nutrition, racial profiling by police officers or employers, identity theft, and others.