It’s not common yet but some victims- and some perpetrators- have been identified using both public and private DNA databases.
The FBI has a DNA database called the “Combined DNA Index System”, or “CODIS”, that can be used to search for all kinds of matches. I believe that anyone convicted of a felony in any state now has to contribute a DNA sample to this CODIS database. More about CODIS here: Combined DNA Index System - Wikipedia
And of course now there are public DNA databases that grew out of traditional genealogy research and are used primarily by people for the purpose of learning about their own family genealogic and genetic histories such as Ancestry dot com, 23AndMe, and others.
Adding genetic information to family genealogic histories can lead to surprises or unusual situations. Lots of folks have found out that, for example, they have a sibling who is only a half-sibling, or that their sibling is actually the child of an older sibling or cousin so-and-so, or that they were not genetically related to their parents for whatever reason, etc.
I have a coworker who recently found out that her deceased brother may have fathered a child when he was in high school through a match on her DNA kit results.
Or maybe it was that other brother… but the age difference would have been criminal…
She’s mulling the information now and hasn’t decided how to handle the situation.
Another coworker who was adopted used a DNA company kit in the hopes of identifying and finding out about her biologic family.
About 2-3 years after this coworker created her account she received an in-website contact from a man also in the same database who said there must be an error because they were closely matched. She explained that she was adopted and what she knew about the circumstances of her adoption. She never heard from the man again and did not pursue contact with him again herself either- which was the whole point of her using the DNA kit inn the first place- to find biological relatives.
When someone purchases a consumer genetics kit from one company, the purchaser can only get matches from other users of the same company. To find more matches, one could buy other kits from other companies but that can get a little expensive at $50 to $200 a kit. So now there are also websites that will allow folks to compare DNA results purchased from different consumer labs. One of these is called GEDMatch. It’s nto expensive either- something like $10 or maybe $20 a year.
Now person “A” can upload their results from the 23AndMe brand kits, and person “B” can upload their AncestryDNA brand results, and both can look for matches between those companies and more.
The “Golden State Killer” was identified when investigators got DNA matches from many different crime scenes on CODIS but couldn’t identify the man who committed the crimes in CODIS.
Some investigators opened a GEDMatch account and ran the DNA sample they had collected from a rape kit that also matched many other crimes in the CODIS database through GEDMatch. They were able to identify a distant relative (or maybe some distant relatives) of the DNA sample they had.
But like naita mentioned above, developing family trees can be difficult. There are geneologists who specialize in this and now there are forensic geneologists who specilaize in this ti identify specific individuals.
These investigators hired a forensic genealogy expert to develop the family trees of the identified distant relatives of the DNA sample to see if any of the family trees led to the criminal they were seeking.
The expert developed about 25 different family trees beginning as far back as to the great-great-great-great grandfather of the DNA sample and forward. Some of the family trees had 1,000 members in them. From there the investigators began to eliminate people who could not be the man they were looking for until they were down to two and then just one.
The investigators then collected fresh DNA from their one family tree suspect. (They collected fresh DNA from the door handle of the suspect’s car and also from a tissue collected from his trash, but in another case the confirming sample sample was collected from some fast food trash thrown out of a car window!)
What made this Golden State Killer case interesting was that the investigators used the consumer database GEDMatch to find their target, and not a law enforcement database.
This was upsetting to many users of DNA sites- not that they were opposed to finding a serial rapist/serial killer in any way. They were concerned about how their private data was being used and about the use of their private data by third parties without their knowledge or consent. (This was also an issue earlier when some women were afraid to be tested for the BRCA gene associated with breast cancer. Would insurance companies deny them care as a pre-existing condition if the company knew the women were BRCA positive?)
Now most (all?) of these consumer DNA databases require the owners of the DNA data to give permission for their DNA data to be used by law enforcement. GEDMatch requires users to “opt in” if the owner of the DNA is OK with their information being made available for law enforcement use.
(I hear the user account has a little yellow badge icon on it. I ownder if one could agree but not display the badge or vice versa.)
I presume GEDMatch does not allow third party use of it’s client’s data but I believe they sold late last year. Who knows what if anything may change.
I once offered one of these DNA kits to one of my young-adult children as a holiday or birthday present but not only did she not want the kit for herself, she also didn’t want me to use one either. Certainly my information could reflect on many of those related (or not related) to me. She also isn’t confident about how the information could be used, misused, or its privacy breached in the future.