@298906f7 
Apparently they got access by stealing data elsewhere - people using their 23andMe password for some other site.