"[23andMe] was not hacked itself but cyber-criminals logged into about 14,000 individual accounts, or 0.1% of customers, by using email and password details previously exposed in other hacks.".
The headline says "people hacked" not "23andme hacked". I see a difference there though either way people should read the article to get a full picture.