The potential consequences of an unknown party accessing your DNA are vast and uncertain, given the evolving understanding of the genome. Drugmakers could potentially use your genetic information to determine what ailments you are at risk for and then target you with advertisements for related drugs.

“There’s a lot of ways that this data might be misused or used in a way that the consumers couldn’t anticipate when they first bought 23andMe,” said Suzanne Bernstein, counsel at the Electronic Privacy Information Center. Unlike passwords that can be changed after a leak, once your DNA is exposed, it remains accessible indefinitely.