A DNA-testing firm with links to Russia has seemingly vanished without notifying its customers about the fate of their sensitive data. Atlas Biomed, which had offices in London, previously offered insights related to individuals' genetic makeup and their susceptibility to various illnesses. Yet, the company's website is currently inactive, leaving customers unable to access their personalized reports, leading to growing concerns over the security of their personal information.
Many disgruntled clients have expressed alarm over the disappearance of the firm and the potential risks surrounding their biometric data. The Information Commissioner's Office (ICO) has confirmed it received complaints about Atlas Biomed and noted the importance of secure handling of personal data by organizations. "People have the right to expect organizations will handle their personal information securely and responsibly," the ICO stated.
Lisa Topping, hailing from Saffron Walden, Essex, paid around £100 for her personalized genetic report years ago. Initially content with the service, she could easily access her reports online, until she found the website unexpectedly gone. "I don’t know what someone else could do with [the data], but it’s the most personal information... I don’t know how comfortable I feel they just disappeared,” expressed Topping.
Another affected customer, Kate Lake from Tonbridge, Kent, had forked out £139 for her report which was never delivered. Despite being promised a refund, she has heard nothing since, reitering, "It’s like no-one was at home. What happens now to the information they have got? I would like to hear some answers." Customers have taken their frustrations to the company's social media pages but received no responses.
The apparent silence of Atlas Biomed has extended even beyond customer communication. Attempts made by the BBC to reach out were met with failed contact numbers and empty office visits. It appears the firm, which boasted over 11,000 followers on Instagram, has not posted since March 2022 and its final post on X (formerly Twitter) was back in August 2022.
Though the firm may have gone quietly, speculation around its links to Russia has stirred curiosity. Atlas Biomed still has its name registered with Companies House, the UK government department responsible for company registration, but has not submitted any accounts since December 2022. Out of its eight official positions, four members have resigned, and two of the remaining directors share addresses within Moscow, raising questions about the legitimacy of the operation.
Prof. Alan Woodward, cybersecurity expert, remarked on the odd nature of the Russian association. He suggested, “If people knew the provenance of this company and how it operates, they might not be quite so ready to trust them with their DNA.” A representative from the London-based company registration firm linked to Atlas Biomed confirmed they are clients but refused to disclose any additional information about the DNA company for purported security reasons.
Despite the unsettling situation surrounding Atlas Biomed, as of yet, no evidence has emerged indicating misuse of the vanished customer data. Carissa Veliz, author of Privacy is Power, weighed in, emphasizing how individuals relinquishing their DNA data are at the mercy of companies like Atlas Biomed, highlighting the unique nature of DNA as personal information -- it cannot be changed and potentially reflects on familial genetic predispositions.
Under UK GDPR regulations, biometric data is afforded special protection, mandatorily obliging firms to handle it with utmost security. Veliz concluded, "When you give your data to a company you are completely at their mercy and you have to be able to trust them. We shouldn’t have to wait until something happens to raise such concerns." This incident raises questions not just about trust but accountability among companies dealing with highly-sensitive customer data.
