The decisions that made it
The Money Machine · Business Model
23andMe Sold Spit Kits to Buy a Drug Company. The Drug Company Never Arrived.
23andMe's collapse looks like a data-breach story. It isn't. In October 2023 GSK replaced its drug partnership with a $20M non-exclusive data license — a renewal on terms that repriced the entire thesis the kit business existed to fund.
8 min
The Fall · Decision Forks
23andMe Sold You a Spit Kit Once and Called It a Platform. The Math Never Worked.
23andMe didn't die from a data breach. It went public at a $3.5B valuation, accumulated $1.79B in net losses, and collapsed 99.6% — because a one-time $200 transaction was dressed up as a recurring data business, and every escape attempt destroyed capital.
8 min
The Crisis Response · Crisis & Reinvention
23andMe Wasn't Hacked. Its Own Feature Did the Damage — and Its Crisis Response Did the Rest.
Only ~14,000 23andMe accounts were directly compromised by credential stuffing. A single opt-in social feature turned that into a 6.9-million-person exposure — and a quiet $400,000 ransom and a blame-the-user defense turned a breach into a bankruptcy.
8 min