23andMe reportedly learned about the breach months after millions of customers’ personal information was made publicly available.