According to Verogen, the company that recently purchased GEDmatch, no user data was downloaded or compromised. But two days later, the genealogy website MyHeritage alerted users to a phishing scheme that targeted people who used both MyHeritage and GEDmatch. In a statement posted online, the company said it suspects the attackers may have gleaned the email addresses from GEDmatch.

Verogen has taken GEDmatch down. The company says it is working with a cybersecurity firm to conduct a forensic review and safeguard the site. That may not be enough to recover users’ trust.

Some already see giving law enforcement access to DNA profiles as controversial. As BuzzFeed News reports, this incident could limit those on both sides of the debate. If GEDmatch can’t keep data safe, users may be less likely to create DNA profiles, which could make it harder for police to use the site to solve cold cases. On the other hand, if GEDmatch can’t limit police access, users who may have made a profile on the condition it wouldn’t be used by law enforcement may not create a profile at all. That means less data for genealogists to work with.

Investigators linked Talbott to the 1987 murders of Canadian couple Jay Cook and Tanya Van Cuylenborg after two of his cousins (from both sides of the family) uploaded their DNA profile to GEDMatch. The database, which also led to the Golden State Killer arrest, allows users to upload their DNA test results from services like Ancestry and 23andMe, so they can find other relatives and create a comprehensive family tree.

CeCe Moore, the genetic genealogist who worked with the authorities on the case, traced the DNA extracted from semen left on Van Cuylenborg’s body to Talbott’s parents through his cousins. His parents only have one son. It was only after he was identified through the database that authorities were able to match his palm print to a print lifted from the scene.

According to Wired, both sides agreed to treat the DNA identification as a tip before the trial even began, and nobody questioned the method used to link Talbott to the case. If more and more cold cases go to trial due to DNA databases, though, there’s bound to be serious discussions on whether using them to solve crimes should be regulated.