Hackers were able to gain access because some customers reused old passwords, biotech company 23andMe said.