Not letting 23andme off the hook (Score 1)

They use email as a login which isn't the most secure option, and they either failed to notice or failed to act against a massive brute force attack on their system.