Ancestry is a genealogy and consumer DNA-testing service operated by Ancestry.com LLC and U.S. operating subsidiaries (including Ancestry.com Operations Inc., Ancestry.com Operations L.P., and Ancestry.com DNA LLC), with Ancestry Ireland Unlimited Company as controller for non-U.S. customers. Private equity funds managed by Blackstone completed their acquisition of Ancestry from Silver Lake, GIC, Spectrum Equity, and Permira in December 2020 at a reported $4.7 billion enterprise value, with GIC retaining a minority stake. Ancestry's Privacy Statement says it does not sell or share Genetic Information with third-party marketers, insurers, or employers, and separately declares under CCPA that it does not sell or share Personal Information; biological DNA samples are biobanked only with consent and destroyed absent consent, and further research use requires an opt-in 'Informed Consent to Research.' The same policy states Ancestry does not voluntarily provide user data to law enforcement absent valid legal process and says it 'produces a Transparency Report where we list the number of valid law enforcement requests,' though the report page itself returned no server-rendered content when fetched and an archive snapshot attempt also failed, so its actual request counts could not be verified for this dossier. Ancestry's own policy also discloses routine cookies and third-party marketing/advertising-partner integrations to serve targeted ads, and its Apple App Store privacy label lists a broad set of data categories (purchase history, contact info, user content, search history, sensitive info) linked to identity for advertising, analytics, and personalization purposes; no breach or regulator action specific to Ancestry itself was found in the primary sources checked.
TRACK RECORD
1 BREACH
[2015-11-07] · BREACH
Have I Been Pwned lists a breach record for Ancestry: "Ancestry".
Approximately 297,806 accounts affected, per HIBP.
Ancestry's Apple App Store privacy label discloses a broad set of data categories 'Linked to You' by default, including Purchases (purchase history), Contact Info (physical address, email address, name), Identifiers (User ID), Usage Data (product interaction), User Content (photos/audio), Search History, and Sensitive Info, used for purposes including the developer's Advertising or Marketing, Analytics, and Product Personalization.
Ancestry's Privacy Statement states that customers can consent to have their Biological Samples (DNA and extracted material) stored in Ancestry's biobank for future testing at their option, that future testing or research may be done only if the customer agrees to Ancestry's Informed Consent to Research or consents to other specific tests, and that Ancestry will destroy the Biological Samples if the customer does not consent to storage.
A Blackstone press release, republished verbatim on Eastman's Online Genealogy Newsletter after Blackstone's own press page returned HTTP 403 to both a live fetch and a Wayback attempt, states that private-equity funds managed by Blackstone completed their acquisition of Ancestry from Silver Lake, GIC, Spectrum Equity, and Permira for a total enterprise value of $4.7 billion, dated 7 December 2020, with GIC retaining a minority stake.
Ancestry's Privacy Statement names the operating-entity chain that processes user data: Ancestry.com Operations Inc., Ancestry.com Operations L.P., Ancestry.com DNA LLC, Ancestry International DNA LLC, FindAGrave Inc., and iArchives Inc., which together with Ancestry comply with the EU-U.S. Data Privacy Framework.
Ancestry's Privacy Statement states that, as relevant to California's CCPA definitions, Ancestry does not share or sell Personal Information, and specifically that it does not sell or share Genetic Information with third-party marketers, insurance companies, or employers, nor use Genetic Information for marketing or personalized advertising without a customer's explicit consent.
Have I Been Pwned's breach catalog lists the "Ancestry" incident (ancestry.com), breach date 2015-11-07, affecting approximately 297,806 accounts. Data classes exposed per HIBP: Email addresses, Passwords. Source: Have I Been Pwned (haveibeenpwned.com), CC BY 4.0.
Ancestry's Privacy Statement states that Ancestry does not voluntarily provide access to user data to governmental or judicial bodies or law enforcement agencies, and requires government agencies seeking customer data to follow a valid legal process under Ancestry's published Guide for Law Enforcement; the same policy separately states Ancestry produces a Transparency Report listing the number of valid law enforcement requests, though that report page returned no server-rendered content when fetched for this dossier and a Wayback attempt also failed, so its counts could not be verified.
Ancestry's Apple App Store privacy label contains no 'Data Used to Track You' section; the only data it discloses as collected but 'Not Linked to You' is Coarse Location, Crash Data, and Performance Data, used for Analytics and App Functionality purposes -- narrower than the cross-app tracking categories some peer apps self-disclose.
Ancestry's Privacy Statement discloses that it uses cookies and similar tracking technologies together with technical integrations with third-party marketing and advertising partners to collect data about users' interests or behaviors and serve targeted ads, with opt-out controls described in its Cookie Policy.