"Given 23andMe's reported financial distress, I remind Californians to consider invoking their rights and directing 23andMe to delete their data and destroy any samples of genetic material held by the company," Bonta said in the release.

Adrianus Warmenhoven, who serves on the security advisory board at NordVPN, described genetic data as the "blueprint of your entire biological profile." He encouraged consumers to delete their information and be mindful of the companies they chose to share it with going forward.

"Monitor your digital footprint regularly, and you can also sign up for credit monitoring or identity theft protection services," Warmenhoven said in a statement to CNBC. "Revoke permissions you no longer require, shut down any account you don't use, and learn about how your data is used."