23andMe confirmed hackers used stolen credentials from other hacks to gain access to accounts, which a report says were then used to find and scrape other users’ information.