Unfortunately, everyone who used their service did agree to it. Directly from their Privacy Policy:
Commonly owned entities, affiliates and change of ownership
If we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your Personal Information may be accessed, sold or transferred as part of that transaction and this Privacy Statement will apply to your Personal Information as transferred to the new entity. We may also disclose Personal Information about you to our corporate affiliates to help operate our services and our affiliates’ services.
https://www.23andme.com/legal/privacy/#data-sharing
Whether this will hold up in court is a bit murky. But without a large, laborious court battle, they can and will sell the data and they are "legally" allowed to
https://youtu.be/u15HmEMp2Qc?si=XOrVXy0Qu8Jn9ghA (Piped)
I guess there are trucks in World of Warcraft